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—_ is fraught with political risks, from employee 
angst to customer dissatisfaction and PR nightmares. 
Pa e JL: how to manage or even prevent the backlash. 


DamageContro 


Australian Firm Wrestles With | 
ERP Delays, $11.5M Overrun 


Problems lead to IT 
overhaul; PeopleSoft 
could face legal action 


BY MARC L. SONGINI 
Problems with the installation 
of an ERP system at Australia- 
based Crane Group Ltd. have 

led to an estimated cost over- 
run of $11.5 million and a reor- 


ganization of the company’s 


IT operations. The difficulties 


may also lead to financial 


claims against PeopleSoft Inc., 


according to Crane officials. 
No legal proceedings have 
been started against People 
Soft, a Crane spokeswoman 
said last week. But she added 
that the company is exploring 
all options because the prob- 


lems and delays on the ERP 
| project caused “quite a disrup- 
tion to Crane’s business over 
the last couple of years.” 

The spokeswoman said 
Crane has spent an estimated 


| $49 million (U.S.) on the proj- 
| ect, which began in early 2001 


and was originally due to be 
completed last year. She de- 


| clined to specify the nature of 


the problems, saying only that 
the rollout has been difficult 


and that Crane and PeopleSoft 


are engaged in discussions 


| about the project. 


Crane, which expects to re- 


E-mail Glitch 
oses Flaw 


In 


Ivacy Law 


Inadvertent release of county employee data to 
Swedish company leads to California inquiry 


BY DAN VERTON 
IT officials in Contra Costa 
County, Calif., last week 
launched an investigation 
into how hundreds of internal 
e-mails that contained private 
employee data ended up in 
the in-box of a Swedish com- 
pany. And now legal analysts 
say the incident has revealed 
major weaknesses in Califor- 
nia’s landmark pri- 
vacy law. 

The investigation 
was launched after 
Computerworld notified the 


| county on July 6 that Robert 


Carlesten, managing director 
of Internet company Ord&Bild 
AB in Karlstad, Sweden, had 
produced dozens of e-mails 
that he said had been arriving 


at his Internet.ac domain reg- 


ularly for the past two years. 


| Carlesten said he responded 
| to the senders of the e-mails 


We a 
REPORT 


on multiple occasions to in- 
form them of the problem but 
never received a — 

In addition to a deluge of 
administrative communica- 
tions from the county’s De- 
partment of Information Tech- 
nology and its human re- 
sources director, the e-mails 
contained detailed discussions 
and attachments related to the 
payroll files for the 
county’s Superior 
Court as well as 
current and former 
employee benefits. Many of 
the e-mails contain the names, 
employee ID numbers and 
benefits information of Supe- 
rior Court commissioners and 
other workers. Computerworld 
broke the story on its Web site 
on July 6 [QuickLink 47999]. 

Tom Whittington, CIO for 
the Contra Costa County gov- 


Privacy Law, page 45 


IT by Committee 


IT governance and 
steering committees 
are winning adher- 


ents such as Cathy Brune, CTO at 
Allstate Insurance. But recent stud- 
© ies indicate that many companies 
remain holdouts. Thomas Hoffman 
reports on the adoption of formal 
IT governance processes. PAGE £ 


port revenue of about $1.5 bil- 
lion for the fiscal year that 
| ended June 30, makes prod- | 
ERP Delays, page 45 


LebasWbesbeccsVUMDecsebbecdboccbebenacectesttQeedt 

SBXBBIF THERESEERERESSEBCAR-RT LOTS*B-052 

#0234939/CB/0% CW2004280 O01 14530 
75 t 


NEWSPAPER 


PROQUEST 
PO BOX 384 
ANN ARBOR MI 48106-0984 


INSIDE PeopleSoft warns of a Q2 
revenue shortfall - and it’s not the only 
software vendor to do so. Page 
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The right management should do more than just protect. 
It should also enable. 
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With eTrust security management software, your information isn't just safeguarded from internal and external threats. 
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Worm Wars 


In this week’s Technology section: 
As new worms and viruses 


appear at an ever-quickening pace, ™ 


companies need much more than 
a traditional perimeter defense in 
order to fend them off. Page 21 
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The Coming Robot Revolution 


Also in this week’s Technology section: 
After spending decades mostly in facto- 
ries, robots will begin playing roles in 
homes and offices, experts say. Page 26 
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IT by 
Conunittes 
SPECIAL [pang 
Gian eaeetatgietr e 
proaches, and many companies 


don’t involve their top execu- 
tives - or even have such 


MIT research finds a correlation 
between governance and 


Oxley isn’t a big factor in their 
IT governance efforts. Page 7 


Q2 software sales slump 
as spending by U.S. users 
dips in June. 


SAP and MySQL prepare an 
upgrade of the MaxDB open- 
source database. 


? Q&A: Sun’s John Loiacono 
discusses plans to move So- 
laris to an open-source model. 


? Microsoft gives users more 
options for support through 
its channel partners. 


BearingPoint boosts China’s 
standing as a possible offshore 
outsourcing venue. 


The BBC awards Siemens 
a $3.7 billion IT contract. 


E-voting takes a hit from a 
California judge. 


The Pentagon’s IT problems 
have wasted billions of tax- 
payer dollars, the GAO says. 


a Case Study: Wireless CRM 


Takes to the Field. Pitney 
Bowes’ new wireless field ser- 
vice system provides a wider 
wireless coverage area and 
more access to customer data. 


: 25 Simplifying NAS Manage- 


ment. More companies are 
choosing virtualization tech- 
nology to consolidate man- 
agement of multiple network- 
attached storage systems. 


28 Security Manager’s Journal: 
Four Steps to a Secure Bud- 
get. Our new columnist out- 
lines a strategy for convincing 
the CFO to fund IT security 
projects. 
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: 31 Damage Control. Backlash 

: over offshore outsourcing has 
triggered productivity and 
revenue losses. Here’s how 

to control the damage. 


: 34 Managing ‘Real’ Risks. Risk 


management is an idea whose 
time has finally come, says 
Cutter Consortium analyst 
and author Tom DeMarco. He 
explains how to embrace risk 
and reap the rewards. 


: 35 Q&A: Moving Targets. Com- 


panies go through innovation 
stages, so IT needs to provide 
the right help at the right 

time, says Geoffrey A. Moore. 


: 36 Career Watch. How to land 


an IT job in today’s market. 
Plus, burning the midnight oil 
in Britain, and hot summer 
reading for IT execs. 


8 On the Mark: Mark Hall 
writes that a movement is 
afoot to get you to dump all 
of your proprietary Unix 
hardware. 


Maryfran Johnson says deci- 
sions to send IT work off- 
shore will remain controver- 
sial for a while, but better 
communication can help. 


Michael H. Hugos looks at 
five key skills shared by all 
successful systems designers. 


Thornton A. May sees the 
keys to IT success in the 
things we say, think and do. 


29 Tommy Peterson warns: If 
you thought pregnant chads 
in 2000 were bad, wait until 
you see what a determined 
hacker could do to the democ- 
ratic process this fall. 


38 Bart Perkins thinks that, 
rather than engaging in “des- 
peration outsourcing,” compa- 
nies are better off investing in 
a sound project to bring a bro 
ken IT shop back to life. 


46 Frankly Speaking: Frank 
Hayes wonders what Contra 
Costa County, Calif., could 
have done to keep sensitive 
e-mail from going astray. Not 
much, he figures. 
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How to Launch an Internet Use Policy 
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ber of ways if they set rules for employee In- 
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EFORE Allstate Insur- 
ance Co. formed a cap- 
ital spending commit- 


tee with IT governance | 
| not involved enough yet,” said 


| responsibilities about 18 

| months ago, the process of 

| prioritizing IT projects typi- 

| cally was decided by “who- 

ever spoke the loudest or 

| whoever had the biggest 

| checkbook,” said Chief Tech- 
nology Officer Cathy Brune. 

| Now Brune and some top 

| Allstate executives, including 


| the chairman and CEO and the | 


| chief financial officer, collec- 
tively decide how to prioritize 
IT initiatives based on busi- 
ness needs. “They help me de- 
| cide where to spend our mon- 
| ey,” Brune said, noting that the 
new approach to IT gover- 
nance gives the business exec- 
| utives a better understanding 

| of the IT spending process. 

IT governance committees 
like the one at Allstate are be- 
coming more commonplace as 
companies aim to better align 
| their IT operations with busi- 
ness goals. The idea behind 
| such committees is to bring 
| together key IT and business 
managers and give them joint 
| responsibility for making deci- 
sions about technology priori- 

ties and investments. 
| But the specific IT gover- 
nance techniques being used 
| by different companies vary 
widely, according to more 
than a dozen IT managers, 
researchers and academics 
interviewed for this article. 
Moreover, many companies 
have yet to adopt governance 


| processes that include direct 


input about IT from CEOs, 
other senior executives and 
board members — a situation 





IT Governance Is 
On the Hot Seat 


Committees of IT and business execs oversee 
spending at some companies, but surveys find 
lots of skeptics. By Thomas Hoffman 


that some analysts think could 


| hamper efforts to align IT and 


business. 
“Top management is still 


Gary Hardy, technical coordi- 


| nator at the IT Governance 


Institute (ITGD in Rolling 


Meadows, II]. CEOs and other 
| high-level executives often 
| recognize IT’s importance to 


their companies, he said, “but 


| the CIO still tends to drive IT 


governance initiatives more 
than top management.” 
The use of IT governance 


| committees is by no means 


Companies that don’t have for- 
EME MEUM MOLT LAs) 
might want to take heed of the 
following: Businesses with su- 


perior governance practices 


generate 20% greater profits 
on average than other compa- 
nies that share similar goals of 


making IT spending more ef- 
creme Celt Cuar-l (eT 
technology resources with 


business needs, according to 


FUR ABE le 


SLICE UNA li elt My mL: 


Center for Information Sys- 


rami Him eM OE aL Ee 
Sloan School of Management, 


examined IT governance 


Maier cee OM CHL eli LAL 
256 companies from 2001 to 
mid-2003. The findings were 
MUO ECT MUU Mime Mm lele) ¢ 
lie eMC Ger ace Lae 


Performers Manage IT Deci- 
sion Rights for Superior Re- 





universal. In a survey due for 
release this month that was 
conducted for the ITGI by 
PricewaterhouseCoopers, 76% 


| of the 335 CEOs and CIOs 


who responded said they’re 


| aware of IT problems that 


could be resolved if they had a 


| formal governance framework. 


But 42% said they have no 


| plans to create IT governance 

| programs involving executive- 

| level steering and board-level 
strategy committees. 


In a recent online survey of 
about 200 IT executives and 
CFOs at companies in North 
America and Europe, Meta 
Group Inc. found that less 
than 20% of the respondents 


| have set up corporate or IT 


governance committees with 
formal memberships and char- 
ters [QuickLink 47304]. Mean- 
while, analysts have said that 


| they’re aware of only a small 
| number of companies with IT 


oversight panels that include 


| members of their boards of di- 
| rectors [QuickLink 46892]. 


Even companies with IT 


| steering committees may not 


be fully prepared from a gov- 
ernance standpoint if the pan- 


sults (Harvard Business 
School Press). 
CISR Director Peter Weill, 


who helped lead the study and 


co-authored the book, said 
UM Umea 
governance tend to have joint 
decision-making between 
Ieee UR EME Ur (em lE) 


prioritizing technology projects 


PUM iia Cy mic ce 


But Weill noted that compa- 
nies with world-class IT gover- 


nance techniques, such as 
State Street, United Parcel 


Service Inc. and insurer and fi- 


nancial services firm USAA, 
often use completely different 


approaches. “I think the lesson 


here is that you have to have 
governance tailored to what 
NUM ccm ceil COM (oil haa) 
Pl 


State Street ClO Joe Anton- 


ellis said he hasn’t done the 





Atahigh 

level, we 
look at what 
business needs 
to accomplish 
and how we pri- 
oritize project 
deliverables. 


JAY GARDNER, CIO, BMC SOFTWARE 


els include business unit man- 


| agers and department heads 


but not top corporate execu- 
tives, said Rob Austin, a fellow 
at Cutter Consortium in Ar- 
lington, Mass., and a professor 
at Harvard Business School. 
Such committees “don’t ad- 
dress the overarching gover- 
nance problem at an executive 
level,” Austin said, adding that 


PATO MeL mliretulee- lores) gt Uir- 1) ba 
sis that the CISR did to gauge 
the effectiveness of the bank’s 
Me erro emilee ot) aT) 
thinks State Street’s gover- 
EVM eects UML) 
the company spend its IT bud- 
get more effectively and en- 
abling it to earmark more mon- 
ey for projects that support 
UCSD LOh Cece TUCO Br 
increasing revenue. 

BEM amo el Mel cy 
ENR CUPL RIE Lica Vi 
Yael em eccer tT LOMB LT ees} 
IT workforce is 23% smaller. 
In addition, State Street now 
invests about 30% of its IT 
spending on new-revenue proj- 
ects and uses the other 70% 
mtr me Or M Mel el ice 
PV lira cece l (Maer 
provement over the 25%/75% 
spending split that he inherit- 
ed. Antonellis added that his 
goal is to push IT spending re- 
lated to new revenue opportu- 
nities to 40% of the overall 
budget by the end of next year. 


- Thomas Hoffman 
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BO asic! 
Lack of required skills 


Formal solutions won’t work 


No IT problems to fix 
eee ||| 
BCom edu cic’ 
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boards of directors also need 
to be involved in overseeing 
IT. “It seems to me that there’s 
a train wreck due sometime 
... where inattentive boards 
are not going to know what hit 
them when they have an IT 
disaster,” he said. 

At Allstate, business units 
are responsible for funding 
maintenance and upgrades of 
their own applications. But 
Brune said IT spending is 
managed at a group level, and 
money is moved around be- 
tween units as needed. The 
capital allocation committee, 
which also includes represen- 
tatives from the Northbrook, 
Ill.-based insurer’s two main 
operating units, has to ap- 
prove all IT projects budgeted 
at more than $5 million, or $25 
million over five years. 

Effective IT governance 
“makes you more nimble 
about what you do,” Brune 
said, adding that Allstate’s ap- 
proach helps avoid political 
infighting that can slow down 
decision-making. 

Other companies have IT 
governance goals that are sim- 
ilar to the ones espoused by 
Brune. But they have adopted 
somewhat different tactics for 
achieving their objectives. 

Earlier this year, Cleveland- 
based KeyCorp formed a tech- 
nology advisory board that in- 
cludes CTO Robert Rickert, 
the bank’s CFO and the head 
of each business unit. The 
board meets regularly to pri- 
oritize and manage the $100 
million in IT project spending 
planned for this year, said Bob 





Dutile, an executive vice presi- | 
| dent in the company’s Key 
| Technology Services Group. 


In the past, IT governance 


| at KeyCorp consisted of the 
| bank’s CFO measuring IT 
| spending by line of business, 


Dutile said. By last year, the 


| prioritization of IT projects 
| was done “more ad hoc at the 


corporate level,” he noted. 


| The more structured gover- 
| nance process now in place 
| ensures that KeyCorp has an 


_ AGovernance 
_ Framework 
IT STRATEGY COMMITTEE 


= Provides insight and 
advice to the board of 
directors on IT topics 


= Gives direction on 
IT strategy to senior 
management 


= Can include board 
members, key execu- 
tives and external IT 
experts 


IT STEERING COMMITTEE 


= Makes decisions on IT 
spending levels, project 
plans and other opera- 
tions issues 


= Oversees day-to-day 
management of projects 
and the delivery of IT 
services to end users 


= Can include senior ex- 
ecutives, business unit 
leaders and IT managers 








explicit approach for allocat- 
ing IT funding, Dutile said. 
When Jay Gardner became 


| CIO at BMC Software Inc. 


three years ago, he discovered 
that the Houston-based soft- 


| ware vendor had 128 IT proj- 


ects in progress, many of 


| which had no business owners 


or return-on-investment crite- 


| ria attached to them. Gardner 


spurred the creation of an in- 
formal committee to oversee 
IT decision-making, and BMC 
made the group a formal entity 
last September. 

The IT executive board 
meets at least monthly, but be- 


| tween February and May, it 


met every two weeks because 
“we had a lot of projects to 


| prioritize,” Gardner said. The 
| board includes senior man- 


agers from each department, a 
representative from BMC’s in- 


| ternational operations and its 
| chief accounting officer. Gard- 


ner and BMC’s director of IT 


| operations are also members. 


“At a high level, we look at 


| what the business needs to ac- 


complish and how we priori- 
tize project deliverables,” said 


| Gardner. The members of the 


board “not only make the de- 


| cisions, but they come with 
| their checkbooks,” he added. 


Each of the six business 


} | units at Wyeth, a maker of 


pharmaceuticals and other 


health care products, has its 


own IT steering committee 
with a liaison from the IT de- 
partment. But some large proj- 
ects are vetted by an execu- 
tive-level committee that in- 


| cludes CIO Bruce Fadem, plus 


Madison, N.J.-based Wyeth’s 
CEO and CFO and the man- 
agers of its six business units. 
For example, if Wyeth’s con- 
sumer health care products 


| | group has 25 IT projects plot- 

| ted out over the course of a 

| year, the executive committee 
; | will monitor the largest two or 
| | three, Fadem said. Even so, 


much of the accountability for 
the IT projects resides within 


| the business units themselves. 


“What we’ve done is put the 


| prioritization of IT invest- 


ments in the hands of our 
business managers,” Fadem 


| said. “To think that senior 


management can sit in a com- 
mittee meeting and rank proj- 


IT Execs Downplay Role of 
Sarbanes-Oxley in Governance 


The relatively low levels of inter- 
est in creating IT governance 
committees found by the ITGI 
and Meta Group surveys are 
alarming, considering the 
heightened emphasis that the 
Sarbanes-Oxley Act has placed 
on overall corporate gover- 
nance, said Adrian Bowles, 
director of education and re- 
search at the IT Compliance 
Institute in Seattle. 

Bowles said he expects atti- 
tudes to change as the dead- 
lines for complying with the 
financial reporting law begin to 
draw near. “Certainly, more 
companies are trying to get 
serious about IT governance, 
whereas four or five years ago, 
not a lot of people were talking 
about it,” he said. “As we get 
into crunch time for Sarbanes- 
Oxley [compliance], we're go- 
ing to see more formal evi- 
dence of IT governance.” 

But none of the IT execu- 
tives interviewed for this story 
said Sarbanes-Oxley played an 
instrumental role in driving their 
companies’ IT governance ef- 
forts. Instead, they cited factors 
such as a desire to better align 
IT strategies with the needs of 
business units. 

MasterCard International 


| ects in order just isn’t practi- 


cal. They might know the top 


| five criteria for a project, but 


not beyond that.” 

One of the companies that 
analysts cite as a leader in IT 
governance is State Street 
Corp., a financial services firm 
in Boston. Nearly three years 
ago, State Street formed an 
IT executive council that cur- 
rently includes CIO Joe An- 


| tonellis, the company’s CEO, 


its vice chairman and the 


| heads of its three business 
| units. The group meets every 


six weeks to review IT spend- 
ing levels and look at how 
State Street's 3,200 IT workers 


| are distributed among proj- 


ects, Antonellis said. 
When Antonellis became 


| CIO 18 months ago, he formed 
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Inc. has an IT steering commit- 
tee that meets every six weeks 
or so and includes IT represen- 
tatives and business managers 
from each of the four regions 
where the Purchase, N.Y.- 
based company operates. The 
committee categorizes pro- 
posed IT projects and then 
ranks them in importance 
based on business needs and 
projected paybacks, said 
James Whalen, senior vice 
president of finance and ad- 
ministration at MasterCard’s 
global technology organization. 

MasterCard has changed 
from being a member-owned 
company to one that's publicly 
traded, increasing the amount 
of financial disclosures it needs 
to make. But Sarbanes-Oxley 
“isn't a primary driver” for its IT 
governance efforts, Whalen 
said. IT governance would 
have become more important 
at MasterCard even if the law 
never came into play, accord- 
ing to Whalen. 

“| think this is tangential [to 
Sarbanes-Oxley], because our 
investment decisions are sig- 
nificantly more transparent and 
require a significant amount of 
communications,” he said. 

~ Thomas Hoffman 


an office of IT strategy and 
governance within State 
Street’s IT department. The 
strategy and governance of- 
fice, which is run by his chief 
of staff, sets internal technical 
standards and oversees every- 
thing from IT architecture 
decisions to technology risk 
management procedures. 
Despite State Street’s two- 
pronged strategy for governing 
IT, Antonellis said the firm 
continues to wrestle with 
thorny issues such as how to 
migrate the governance model 
to its overseas divisions. 
“That’s a challenge,” he said, 
adding that State Street hopes 
to ease the process by stan- 
dardizing globally on develop 


| ment tools from IBM’s Ratio- 


nal Software unit. @ 48025 
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Sprint Taps IBM 
For More IT Work 


Sprint Corp. announced a five- 
year IT services deal with IBM 
that expands the scope of an ini- 
tial agreement the two companies 
signed in September. Under the 
new contract, which is valued at 
more than $400 million, IBM 
Global Services will take over ap- 
plication development and main- 
tenance on some Sprint systems. 


About 1,000 IT workers will trans- | 


fer to IBM as part of the deal. 


SAP Says It Will 
Top Q2 Forecast 


SAP AG said it will report second- | 
quarter revenue of about $2.2 bil- 


lion, up 9% from the year-earlier 

level and slightly more than finan- 
cial analysts had projected. Soft- 

ware license sales should total 


$614 million, a 15% increase over | 


last year’s second quarter. SAP’s 


showing is in contrast to warnings | 


by other software vendors that 


their results will be lower than ex- | 


pected (see story, page 10). 


Mozilla Issues Fix 
To Windows Users 


The Mozilla Foundation issued a 
software patch designed to plug a 
security hole that could affect 
users who run its open-source 
Mozilla Application Suite, Firefox 
browser and Thunderbird e-mail 
client on Windows systems. The 
patch disables use of the “shell:” 
external protocol handler, which 
attackers could exploit to run ma- 
licious code. Users of Linux and 
Macintosh systems aren’t at risk, 
the foundation said. 


Short Takes 


A California judge approved the 
$1.1 billion settlement of a class- 
action lawsuit filed in that state 
against MICROSOFT CORP. over 
its pricing policies [QuickLink 
35711] . ... PEOPLESOFT INC. up- 
graded the manufacturing asset 
management module in its Enter- 
priseOne line of business applica- 
tions for midsize users. 


NEWS 


C ONTHEMARK 


Reach Path to 
‘Linux Nirvana’. . . 


... With archiving tool for data center. That’s the message | 


from major software vendors that have jumped on 
the information life-cycle management bandwagon. 
SAP AG wiil release an ILM product, possibly this 
summer, based on technology from OuterBay Tech- 
nologies Inc. And Sybase Inc. in Dublin, Calif., has 


just begun offering Outer- 
Bay’s ILM technology, joining 
PeopleSoft Inc., Oracle Corp., 
EMC Corp. and other compa- 
nies anxious to get users to 
migrate their dusty data from 
high-priced proprietary 
servers to cheaper Linux ma- 
chines. But Michael Howard, 
CEO of Cupertino, Calif.- 
based OuterBay, thinks these 
software giants want to prod 
you toward “a Linux nirvana,” 
where even your pricey pro- 
duction machines, not just 
the ones with archived data, 
are low-cost, commodity Lin- 
ux boxes. Howard claims the 
software vendors are discov- 
ering that their products run 
plenty fast on 
Linux systems 
once the old 
data has been 
moved else- 
where, so 
they’re en- 
couraging you 
to dump vir- 
tually all of 
your propri- 
etary Unix 


~~ 
LVS Wey 
Macey us| 
Pea ane em 





| systems. “For software ven- 


dors, every dollar you take 
away from hardware procure- 
ment leaves you more to 
spend on software,” he says. 
A diabolical plot? Or a gift 
from heaven? 


| Linux Lovers Should 
| Forget Feud With... 


. .. Windows and think above and 
below the operating system. 
That’s the advice from Tim 


| O'Reilly, CEO of O’Reilly Me- 
| dia Inc. in Sebastopol, Calif. 
| The publisher of open-source 


books and the impresario of 
the O’Reilly Open Source 
Convention being held later 


| this month in Portland, Ore., 
| argues that by emphasizing 


the operating system struggle, 
open-source zealots overlook 
opportunities to build suc- 
cessful business alternatives 
to proprietary technologies. 
He points to Google, Ama- 


| zon.com and other successful 


Internet businesses that are 
built on top of Linux, as well 
as Indianapolis-based hard- 
ware maker Progeny Linux 





Systems Inc., which builds its 


«| business below the operating 


system. “A lot of the Linux 


| community is fixated on beat- 


ing Microsoft,” he says. “But 
value is moving up and down 
the stack, as these companies 
show.” In contrast to what 
was written here two weeks 
ago [QuickLink 47772], 
O'Reilly thinks the desktop 
opportunities for Linux are 
alive and well. Especially 
with Novell Inc.’s purchase of 


| SUSE and Ximian, which en- 
| ables the Orem, Utah-based 


company’s brand-name 
recognition in the enterprise 
to be used as ammo in the 


| desktop wars. 


IT Departments Worry 
That Chargeback... 


| aoa 
... systems “will expose them 


much more internally,” says 


| Richard Simons, chief operat- 


ing officer at 
MBG in New 
York. Once in- 
ternal cus- 
tomers learn 
the minutiae 
of how much 
IT is charging 
them, they 
have critical 
data by which 
to measure IT 
against exter- 
nal offerings. However, the 
greater the detail, Simons ar- 
gues, the less time CIOs will 
waste in acrimonious meet- 
ings justifying budget assess- 
ments. “Breaking out the 
costs shows the value users 
get,” he says. “Visibility is 
what helps keep IT honest.” 
MBG offers tools for detailing 
everything from IT to tele- 
communications charges. In 


| the latter category, telcos 


have cut delivery costs nearly 
to the bone, so they’re look- 
ing to automate on business 
processes using XML, he says. 


Automate Multisource 


Information . . . 
. .. workflow in a high-volume 
environment with Interchange, 








www.computerworld.com 


HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY GOSSIP BY MARK HALL 


a new product from Captaris 
Inc. in Bellevue, Wash. Set to 
ship the first week of Septem- 
ber, .Net-based Interchange 
takes vast numbers of files, 


| like e-mails, faxes and spread- 


sheets, and routes them to the 
appropriate recipients, tracks 
their progress, handles excep- 
tions and delivers reports to 
management on workflow 
status. Pricing will start at 
$20,000. 


| GIS Data Shifts 


| IT Landscape... 
| ... for tools in the field. Today’s 


modern civil engineers plant 
stakes equipped with global 
positioning systenis, and this 


| year Caterpillar Inc. made 
| GPS standard on all of its 
| earth-moving equipment, ob- 


serves Chris Bradshaw, vice 


| president of the information 


solutions divisions at Auto- 
desk Inc. in San Rafael, Calif. 
He says these are only some 
of the changes occurring in 
geographic information sys- 
tems that are forcing IT to 
rethink the way it outfits sys- 
tems deployed in the field as 
well as the way the data gets 
processed back in the data 
center. First, Bradshaw points 
out, real-time information 
isn’t necessary for GIS users 
who carry laptops in the field 
— a daily up- 
date back at 
the office 
works fine. 
That means 
less concern 
about wire- 
less problems. 
Another point 
that Bradshaw 
raises is the 
lack of a stan- 
dard for storing GIS data. 
“Oracle is way ahead of the 
game,” but only on the high 
end, he says. If an industry 
standard does appear, Brad- 
shaw says Autodesk will sup- 
port it. In the meantime, buy 
lots of disk drives; GIS data 
eats them like candy. 


@ 48069 
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Applications for Peak 
Performance 


Companies rely on their business applications 
to help them interact with customers, ensure 
employee productivity, and drive revenue. 
Assuring that these applications are performing 
appropriately for the end user is critical. Learn 
how your company can implement a business 
applications management solution, monitor 
applications, and derive benefits from the 
information gathered. 


IT Asset and Service 
Management in the 
Real World 


Today technology is no longer viewed as 2 utility, 


have on attaining business objectives. Tune in to 
this webcast to learn more. 


www.nwfusion.com/go/apc 
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Software Sales S 


Vendors miss second-quarter targets, 
blame spending drop-off in US. in June 





BY LUCAS MEARIAN 
AND MARC L. SONGINI 
IX TOP SOFTWARE ven- 
dors warned last week 
that they will report 
lower-than-projected 
revenues for the second quar- 
ter, blaming a slowdown in 
spending by U.S. customers 
last month. 
PeopleSoft Inc., Computer 
Associates International Inc., 
Siebel Systems Inc., Veritas 


| agement software met expec- 
| the sales in those areas were 
| the end of the June quarter, 


Gary Bloom in a statement. 


| it signed just nine software 


Software Corp., BMC Software | 


Inc. and FileNet Corp. all said 
they missed their revenue tar- 
gets for the quarter. The caval- 
cade of announcements fol- 
lowed a similar warning from 
Sybase Inc. on July 1. 

Sybase cited execution 
problems in its North Ameri- 
can sales unit, and PeopleSoft 
pointed a finger at the fallout 


| than $1 million each during 
| the quarter, the first in its 2005 | 


from the trial in which the U.S. 
Department of Justice is trying 


to block Oracle Corp.’s hostile 
takeover bid for the company. 
But a common thread among 

all seven vendors was that ex- 


pected sales didn’t materialize 


in the U.S. in June. 
For example, Mountain 
View, Calif.-based Veritas said 


MySQL, SAP Pilot Upgrade 
Of Open-Source Database | 


MaxDB to get 
64-bit c -apabilities 


BY MARC L. SONGINI 
SAP AG and development 
partner MySQL AB are ready- 
ing an upgrade to SAP’s open- 
source database that will add 
support for 64-bit computing, 
along with new monitoring 
and management features. 
SAP inked a deal with open- 
source database vendor My- 
SQL in May 2003 to take over 


| support and marketing of the 
| SQL renamed MaxDB. 


| dent of marketing at Uppsala, 


| HP-UX, and support the Java- 


that sales of its storage man- 


tations in most of Europe and 
the Asia-Pacific region. But 


offset by a late drop-off in pur- 
chases by U.S. customers. “At 


our anticipated order flow 
weakened,” said Veritas CEO 


Houston-based BMC said 


licensing deals worth more 





fiscal year. In comparison, 


| BMC inked 16 deals that 
| topped the $1 million mark in 
| the same quarter a year ago. 


| widespread dip in sales is 


| in spending on our end,” said 


| ty of Kansas Medical Center in 


ortfalls 


Some analysts said the 


good news for users because it 
should increase competition 
and further drive down soft- 
ware prices. Others called it 
an indication that the long- 
awaited recovery in IT spend- 
ing is already sputtering. 

For some users, the recov- 
ery hadn’t even begun. 

“I haven’t seen any increase 


Matt Fuoco, director of net- 
work services at the Universi- 


Kansas City. “People are ask- 
ing more questions about the 





Storage Sales Telling for Industry 


In addition to the warning from 
Veritas, storage hardware makers 
Emulex Corp. and Overland Stor- 
age Inc. have said they will miss 
their second-quarter revenue tar- 
gets - a development that has 
made analysts nervous as the 
largest storage vendors prepare to 
report their results for the quarter. 
“We're all anxiously waiting for 
the storage companies to report 
their numbers,” said Gartner Inc. 


| much of the development, 

SAP DB software, which My- 
Zack Urlocker, vice presi- 

Sweden-based MySQL, last 


week said the two companies 
are working on a MaxDB 7.6 


| upgrade that’s due by year’s 
| end. 


The new version will run on 
additional operating systems, 
including 64-bit Linux and 


| include support for MySQL 
| Proxy, a stand-alone program 


| software share information 
| with other databases. 


| User Appeal 
| should come with 64-bit sup- 


| Brann, SAP administrator at 
Swisslog TransLogic Corp., as 


| SAP DB 7.3 to support its R/3 
| ERP system 
| tions. Brann said the maker of 


analyst Roger Cox. “This quarter 
will be a telling quarter. The 
weather reports don’t give you all 
that much confidence.” 

Nitsan Hargil, an analyst at 
Arlington, Va.-based investment 
bank Friedman, Billings, Ramsey 
Group Inc., said in a research note 
that Veritas will continue to face 
increased competition from larger 
vendors such as EMC Corp., 
which last year acquired data 


based Eclipse development 
framework, he said. It will also | 


that lets MySQL’s namesake 


The performance boost that 
port is of interest to Charlie 
are the automated monitoring 


and management features. 
Denver-based Swisslog uses 





and other applica- | 
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spending that’s going on.” 

Fuoco added that there is still 
plenty of economic uncertain- 
ty, which is keeping IT spend- 


| ing flat at the medical facility. 


Jim Prevo, CIO at Green 
Mountain Coffee Roasters Inc. 
in Waterbury, Vt., said many 
companies could still be di- 
gesting software purchases 
they made in prior years. “Cer- 
tainly, all of us are focused on 
getting more out of what we 


backup and recovery software 
vendor Legato Systems Inc. 

Dong Jin Kim, senior Unix sys- 
tem administrator for worldwide 
information systems at Eastman 
Kodak Co. in Rochester, N.Y., runs 
backup software from Veritas on 
his Sun Solaris servers. 

Kim said he hasn't seen any 
change in prices from Veritas. But, 
he added that he has been getting 
increased sales pitches from 
EMC’s Legato unit. 

“Certainly, there’s been more 


materials-handling systems is 

considering an upgrade to 

SAP’s mySAP ERP software 

and a migration to MaxDB 7.6. 
MaxDB is currently used 

in about 6,000 installations, 

Urlocker said. MySQL and 


have already paid for, rather 
than writing checks for new 
software,” said Prevo, who 
runs PeopleSoft’s applications. 

“Companies are still reluc- 
tant to make major software 
purchases,” said John Moore, 
an analyst at ARC Advisory 
Group Inc. in Dedham, Mass. 
He predicted that there won't 
be any big uptick in sales until 
after the November election, 
at the earliest. @ 48066 


price competition in a lot of these 
[storage] markets,” said Brian 
Babineau, an analyst at Enterprise 
Storage Group Inc. in Milford, 
Mass. 

But Babineau said it's too early 
to tell whether the storage sales 
slump is industrywide or limited to 
specific companies. 

Emulex and Overland Storage 
both blamed a lack of reseller 
sales for their shortfalls, which 
they disclosed two weeks ago. 

~ Lucas Mearian 


SAP announced a commercial 
version last November as an 
alternative to the free release 
that SAP includes with its 
business applications. Pricing 
starts at $49 per named user 
on single-CPU systems. 

Charles Garry, an analyst 
at Meta Group Inc., said he 
doesn’t see MaxDB at user 
sites very often, but he fre- 
quently discusses the technol- 
ogy with his clients. 

IT managers at many large 
companies are reluctant to de- 
| ploy the database because 
they think it’s more appropri- 
ate for midsize users looking 
to cut costs, Garry said. 


@ 48080 








COMPANIES THAT PUT VOICE ON THE 
NETWORK CHOOSE THE COMPANY 
THAT BUILT THE NETWORK. 


When voice joins data on a secure network, some remarkable things can happen. Instead of managing different flavors of PBX from location to location, you 
can handle everything from one place, saving time and money—not to mention mileage on IT staff shoes. And with over 20 years of proven networking 
experience, Cisco has become the standard for millions of voice IP users around the world. It's why over half of the Global 500 have chosen Cisco to rethink 
the way they handle voice. And their business. Are you in yet? To learn how Cisco can help you plan, design and implement an end-to-end IP solution, visit 
cisco.com/go/ipcnow. NOW, OVER THREE MILLION PEOPLE ARE USING CISCO IP PHONES. 
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MPSSages 


Cisco SYSTEMS 


THIS IS THE POWER OF THE NETWORK. NOW. 
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Sun Exec Discusses Plans 
For Open-Source Solaris 


No decisions yet about licensing model 


BY CAROL SLIWA 
AN FRANCISCO 
UN MICROSYSTEMS INC. 
will make its Solaris 
operating system avail- 
able under an open- 
source model by the end of the 
year, according to John 
Loiacono, the company’s 
executive vice presi- 
dent of software. 
Loiacono said no de- 
cision has been made 
about the open-source 
licensing model, but he 
discussed the philoso- 
phy behind the move to 
open-source during an 
interview at the company’s re- 
cent JavaOne conference here. 
Excerpts follow: 


Why is Sun going to make Solaris 
available under an open-source 
model? If you talk to CIOs 
about something like Solaris, 


you know what they say to me? | 


“Why would you do that? It 
makes no sense to me.” They 
say, “I want mission-critical, 
reliable, redundant, available, 
secure. That’s what Solaris 
brings to me. I want that to 
continue. Open-source means 
very little to me.’ 

Conversely, you go talk to 
the developers in that corpora- 
tion, and they say, “Oh, this 
would be great. I can write dri- 
vers. I can do innovation.” 

So there’s a sense of creat- 
ing the community. This is 
about how I get more people 
developing software on the 
platform, because at the end of 
the day, it’s all about applica- 
tions. It’s not about the OS it- 
self. People like Windows be- 
cause there’s a lot of applica- 
tions running on it. People are 
liking Mac more because 
there’s a lot of applications on 
it. They like Linux because 
there’s a growing number of 
applications on it. 

The reason we're doing this 
on the whole is we're trying to 
create relevance in the fact that 


| there’s more people finding So- 
laris and being more able to use 
| and modify and actually devel- 
op on top of Solaris. And that 
isn’t just about the [people] 
that we sell to. It’s about creat- 
| ing the community of tens of 
thousands or hundreds 
of thousands of people 
who want to innovate 
on top of the code we 
give them access to. 


Will moving to open-source 
allow Sun to decrease its 
Solaris development staff? 
There’s not going to be 
a huge decrease. The 

| CIOs say, “My biggest worry 

about open-source is all the 

| problems that things like Linux 

| give me. What I want is your 

| QA tests and all the rigidity 

you put behind a Solaris re- 


BY CAROL SLIWA 

Users turning to Microsoft 
Corp.'s ample stable of chan- 
nel partners for products, sup- 
| port or consulting services are 
getting a new point of differ- 
entiation to help them make 
decisions about which ven- 

| dors to select. 

At its Worldwide Partner 
Conference in Toronto yester- 
day, Microsoft launched its 
Services Partner Advantage 
program to provide additional 
| resources and support options 
| to independent software ven- 
dors, systems integrators and 
other partners. 

A standard prepackaged op- 
tion gives a partner phone- 
| based problem resolution sup- 
| port and various online re- 
| sources. The higher-priced 
| “plus” plan can be customized 
| by the partner and adds a des- 
ignated service professional at 








lease.” And my point to them 
is, absolutely. What we'll do to- 
morrow — whether it’s open- 
source, or no matter what li- 
censing model it is — you will 
get Solaris with all its QA, its 
tests, its hardening, all its secu- 
rity that you have today. All 
those resources required to do 
that, we will maintain. 

In addition to innovation for 
things like container technol- 
ogy or fault recovery or dy- 
namic tracing that I’m adding 
as new features in Solaris, I an- 
ticipate now that I’ll have tens 
of thousands of people saying, 
“Here’s an innovation on top 
of that.” So could I get even 
more features built in, or could 
I over time reduce my cost of 
production? Yeah, absolutely 
— as long as I’m doing the QA 
and test cycle on what I call 
| Solaris versus the open ver- 
| sion of Solaris, which is proba- 





Microsoft Partners Get 
New Support Options 


Microsoft as a resource. There 
is also a third plan, based on 
the standard and plus offer- 
ings, that applies to Microsoft 
Business Solutions products. 
| “We want to try to drive 
better credibility for the part- 
ner community so they be- 
come more of an asset for 
their end customers,” said 
Thomas Dawkins, a product 
manager for worldwide ser- 
vices at Microsoft. His prior 
experience includes running a 
consulting practice and work- 











bly called something slightly 
different, just to make sure 
people understand there are 


| differences between the two. 


Will there be two versions of So- 
laris? No. We will release the 
same version. But one will be 
open-source, no support. And 


| one will be the one that we 
ship to Merrill Lynch. 


| Are you leaning toward a specific 


open-source licensing model 

at this point? We have some 
internal debates on what we 
think will be the most optimal. 
There are several to pick from. 


| There isn’t one hammer for 


every nail. 


| Is it possible you'll take an ap- 


proach similar to what IBM did 


| with Eclipse? Possible. You 


should also look at what Red 


| Hat has done with Linux. 


Any other models look appealing? 
I’ve got to be careful, because 


| they do bring different things 
| to the table. You have things 
like the Apache model, which 


gives you some of the brand- 


ing at an independent soft- 
ware vendor. “I know how im- 
portant it is to show credibili- 
ty to a new customer,” he said. 
Partners in the past had to 
pay at least $40,000 to $50,000 
to get premier support with 
Microsoft. They will now find 
an entry-level option for the 
standard plan starting at $5,000 
to $8,000; the entry price point 
for the plus plan ranges from 
$27,000 to $32,000, a Microsoft 
spokeswoman said. The less 
expensive options are expected 
to enable an increasing number 
of Microsoft’s partners to ac- 
cess more consistent support. 
“Tt could be a selling point 
for partners. They might say, 
“We can support your system 


s 5 2 
Microsoft’s New Services Plans 
® Services Partner Advantage Standard Plan: Prepackaged option co- 
ordinated by a team of phone-based service representatives. Offers online 
resources, problem resolution support and proactive services. 
§ Services Partner Advantage Plus Plan: Customizable option managed by 
a designated service representative. Includes consulting services, workshops, 





ing rights. You have MySQL, 
which has some of the brand- 
ing rights. You have the Mozil- 
la license, which is a very pop 
ular license model. You have 
the CPL [Common Public Li- 
cense], which gives you some 
flexibility in different areas. 
And you obviously have GPL 
[General Public License] and 
LGPL [Lesser GPL]. Then we 
even have our Sun public li- 
cense, something we call the 
SISL, the Sun Industry Stan- 
dard License. 


When will you make a decision 
about the licensing model? Short- 
ly. I hate to be so vague, but by 
the end of the year, we'll have 
the whole thing announced. 


Solaris is going open-source. Why 
not Java? We see ourselves as 
being the stewards of Java. 
Compatibility is a key issue. 
@ 48079 


READ MORE ONLINE 
The full interview with John Loiacono is 
available on our Web site: 


QuickLink 48105 
www.computerworld.com 


better because we have a dedi- 
cated support resource at Mi- 
crosoft, ” said Paul DeGroot, 
an analyst at Directions on 
Microsoft in Kirkland, Wash. 
Corporate users looking at 
competitive offerings from 
various partners might now 
ask what kind of support con- 
tract the partner has with Mi- 
crosoft, he said. 

The Partner Advantage pro- 
gram is available to Microsoft's 
Registered, Certified and Gold 
Certified partners. It is intend- 
ed to help address partner 
complaints about contract 
terms, limited service options 
and the lack of consistency in 
the naming of programs on a 
global basis, Dawkins said. 

“Tt arms the systems inte- 
grators and ISVs with services 
they perhaps did not have be- 
fore or didn’t have enough of 
to support their customers ap- 
propriately,” said Paul Ed- 
wards, a Toronto-based ana- 
lyst at IDC. “If partners can 
get access to the people they 
need [at Microsoft], the cus- 
tomers will benefit.” @ 48082 
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Consider the dots connected. The end-to-end voice over IP solution we designed 
for Crate and Barrel features a unified IP messaging platform and the most advanced 
hardware available. The new system will save them a bundle on maintenance, management 
and wiring, while easing the cost and complexity of adding features or employees. And 
its already improving productivity, helping over 400 associates make millions of customers 
feel right at home. To find out more, go to sbc.com/dots. GOING BEYOND THE CALL: 
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Microsoft Looks to 
Cut Costs by $1B 


Microsoft Corp. plans to lower ex- 
penses by nearly $1 billion in its 
2005 fiscal year, CEO Steve 
Ballmer wrote in an e-mail mes- 
sage to employees. Microsoft's 
costs have grown faster than its 


revenue over the past three years, | 


according to Ballmer. “This is ob- 
viously not a trend we can contin- 
ue,” he said, adding that Micro- 
soft executives “want to be pru- 
dent now so we avoid severe 
measures later.” The company's 
new fiscal year began July 1. 


Patent Ruling Goes | 


| city of Dalian. The facility cur- 


Against Microsoft 


The U.S. Court of Appeals in 
Washington reversed a lower- 
court ruling in Microsoft's favor 
as part of a patent infringement 
lawsuit filed in 1998 by Encinitas, 
Calif.-based TypeRight Keyboard 


validating two keyboard patents 
held by TypeRight was “improper” 
and sent the case back to the 

U.S. District Court in San Diego. 
Microsoft repeated its claim that 
no infringement took place. 


STAR CAS ie A TTA TE RN STONEY RTE 


Symbian Receives 
$93M for OS Work 


The six hardware vendors that 
continue to own stakes in Sym- 
bian Ltd. pledged $93 million in 
funding to accelerate develop- 
ment of the London-based com- 
pany’s mobile operating system, 
which competes with software 
from Microsoft and PalmSource 
Inc. The infusion was part of a 
deal in which Psion PLC sold off 
its 31% stake in Symbian. 


A OMBETERE SEE BAR sw IETS. 


Short Takes 


CISCO SYSTEMS INC. said it will 
pay $9 million to buy Parc Tech- 
nologies Ltd., a London-based de- 
veloper of network routing soft- 
ware. .. . ANTIVIRUS SOFTWARE 
VENDORS warned about two new 
variants of the Bagle e-mail worm 
that deposit copies of their source 
code on infected computers. 








BearingPoint Move 


Raises China’s Profile 


| But country still lags far behind India 


| as offshore: outsourcing destination 





BY PATRICK THIBODEAU 


EARINGPOINT INC. 
has opened its second 
development facility 
in China, a move ana- 
lysts see as part of a trend by 


| U.S. firms to expand such op- 


erations in that country. 

The McLean, Va.-based con- 
sulting firm said last week that 
it opened the 56,300-square- 
foot development center in 
the northeastern industrial 


rently has 60 employees, but 
BearingPoint hopes to have 
1,000 people working there 


“ 


as 


; quickly as possible,” said Craig 


Franklin, an executive vice 


| president at BearingPoint and 
| head of its Global Technology 
Corp. The court said a decision in- | 


Services arm. 
BearingPoint, which has 


| 15,500 employees worldwide, 

| also runs a development facili- 
| ty in Shanghai with 400 em- 

| ployees. It has a center in 

| Chennai, India, with 100 peo- 

| ple, which it plans to expand 


to 1,000 workers during the 
next year. The company also 
operates a development cen- 


| ter in Spain. 


Growing Interest 


| BearingPoint isn’t the only 
| multinational firm that’s inter- 


ested in China, but the coun- 
try remains well behind India 
as a provider of development 
services, said Eugene Kubla- 


| nov, an analyst at NeoIT, an 
| Outsourcing consulting firm in 


San Ramon, Calif. 
In 2003, India had IT ser- 
vices exports of about $9.5 bil- 


| lion, compared with about 

| $700 million for China, said 

| Kublanov. Most of China’s ex- 
| port work is for the Korean 

| and Japanese markets, he said. 


According to Michael Ye, 
general manager of business 


| operations at Dalian Software 
| Park Co., other IT firms with 


offshore operations in Dalian 








| include Accenture Ltd., SAP 


AG, Hewlett-Packard Co., IBM 
Global Services and GE Capi- 
tal Corp. 

Wu Jiazhi is a China-based 


programmer who works for 


TopCoder Inc., a Glastonbury, 
Conn.-based firm that con- 
ducts online competitions for 
recruiting programming talent 
for outsourcing projects. Wu 
said he believes China’s work- 
ers have the technical skills 
that will enable the country to 
rival or exceed India within 
several years. China lags not in 
technical skills but in develop- 
ment standards, he said. “Most 


| Chinese firms are providing 


application solutions with rel- 


atively poor extensibility and 
| documentation,” 


he said. 
Kublanov cited project man- 


| agement as a problem for Chi- 


‘BBC Awards Siemens 
$3.7B Outsourcing Pact 


BY PATRICK THIBODEAU 
British Broadcasting Corp. has 
picked Siemens Business Ser- 


| vices Ltd. to take over its tech- 


nology arm in a $3.7 billion 
deal that’s one of the largest 
outsourcing pacts signed 
this year. 

The 10-year agreement, 
the result of a contracting 
process that took only about 
six months, calls for the 
BBC to sell its wholly 


| owned commercial 
subsidiary, BBC 


Technology Holdings 
Ltd., to Siemens. BBC 
Technology employs 


about 1,400 workers. 


John Varney, the 
BBC’s chief technol- 
ogy officer, said Sie- 
mens was chosen be- 
cause the company 
“understood our 





| 


Ysa 
stands the BBC’s 
ret AT ae 


na as well. However, Bearing- 
Point’s Franklin said he be- 
lieves his company has the 
necessary resources in place, 
including bilingual workers 

based in the U.S., to ensure 
good project management and 
clear communication. 

Sierra Atlantic Inc., a Fre- 
mont, Calif.-based outsourcing 
firm that specializes in re- 
search and development, has a 





development center in India. 
But it’s eyeing China as a fu- 
ture development site because 
the country “has the best com- 
bination of cost advantage and 
supply of strong engineers,” 
said Marc Hebert, a vice presi- 
dent. Market access is also a 


| key factor in opening a devel- 


opment center in China, 
Hebert said. 

Although labor costs in In- 
dia are rising, Hebert said he 
sees nothing threatening that 
country’s dominance as an off- 
shore development center. Im- 
pediments to doing business 
in China include government 
bureaucracy and the language 
barrier, he noted. @ 48083 


Chinese officials and BearingPoint executives at the opening of 
BU eR A ae Cm ROLLE am OTT) 


technology vision [and] where 
we need to get to.” 

Most important, “it was a 
very, very strong cultural fit,” 
said Varney, who noted that 
the Berkshire, England-based 
Siemens unit got the nod in 
part because of its willingness 
to be flexible. “They under- 
stand the nature of this con- 
tract, in that it will need to be 
very dynamic — it will need to 
evolve over the next 
10 years.” 

Moreover, Siemens 
is “prepared to travel 
with us as we move 
toward a different 
world of broadcast- 
ing,” Varney said. 
“The basis of our 
transformation is to 
use Internet tech- 
nologies to bring 
program-making 





to every desktop.” 

The BBC began its selection 
process in December with an 
advertisement for bidders. It 
compiled a list of 31 vendors 
and quickly reduced that to 
nine and then three: Siemens, 
Accenture Ltd. and Computer 
Sciences Corp., which 
dropped out of the running. 

Varney said it’s possible 
to put together a complex 
outsourcing deal rapidly if 
enough people are assigned 
to it. The BBC assembled a 
team of about 70 people who 
conducted “1,000 man-days 
of negotiations” over a four- 
week period, he said. 

The BBC used a combination 
of objective measures and sub- 
jective assessments in reaching 
its decision, Varney said. Ina 
previous interview [QuickLink 
47040], he said it was impor- 
tant that teams from the BBC 
and the vendor be able to work 
well together — something he 
said has been accomplished 
with Siemens. @ 48081 





Profiles in Business Mobility #2 | Versatility 


Why carry two devices when you can 
carry just one? 


The Nokia 6820 Messaging Device 





If your employees are often out of the office seMino customers, yet 
they always need to stay connected, the Nokia 6820 Messaging 
Device is the right call. A full messaging keypad makes ema 

and easy. A color screen e 


mobility offerings go beyond phone: 


secure mobile connectivity, you can « 


Nokia 6820 Messaging Device and 
needs an office? Email 


are always right where your 


lemarks or trade names of their respective owners. 


Learn how to mobilize your team and 
Never in the Office Nora rh increase business productivity. Download 
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Court Upholds Calif. E-voting Ban 


Advocates for the 
disabled claimed it 
was discriminatory 


BY DAN VERTON 
FEDERAL JUDGE last 
week upheld a Cali- 
fornia directive that 
decertified touch- 
screen voting machines and 
withheld future certification 
until vendors of those systems 
can meet specific security 
requirements. 

The decision arose from a 
lawsuit, Benavidez v. Shelley, 
brought by disability rights 
advocates and four California 
counties that oppose Califor- 
nia Secretary of State Kevin 
Shelley’s requirement for 
voter-verifiable paper audit 
trails. The counties also op- 
pose Shelley’s order to decerti- 
fy direct-recording equipment 


GAO Says IT Mismanagement | 





(DRE) voting systems. 
The plaintiffs argued that 


banning the systems would 


disenfranchise visually or 
physically impaired voters. 
In an order issued by the 
U.S. District Court for the 
Central District of California, 


Judge Florence-Marie Cooper 
& The evidence 
does not sup- 
port the conclusion 
that the elimination 
of [e-voting ma- 
chines] would have a 
discriminatory effect 


| on the visually or 
| manually impaired. | 


U.S. DISTRICT COURT JUDGE 


| FLORENCE-MARIE COOPER 


At Pentagon Wastes Billions 


BY DAN VERTON 

Despite years of moderniza- 
tion efforts that have cost tax- 
payers billions of dollars, 


thousands of IT systems at the | 
| time of increasing fiscal con- 


Pentagon remain “fundamen- 
tally flawed” and have led to 
logistics and pay problems for 
forces serving in Iraq, accord- 
ing to anew report by the US. 
General Accounting Office. 

The problems, primarily a 
lack of management oversight 
and investment control, stem 
from “long-standing” chal- 
lenges to the Pentagon’s busi- 
ness modernization efforts, 
GAO auditors told members 
of Congress last week. 

For example, more than 200 
inventory control systems at 
the Department of Defense 
still aren’t integrated, offering 
little or no visibility into the 
Pentagon’s $1.1 trillion in as- 
sets, according to the GAO. In 
addition, the Pentagon has no 
standard process for identify- 
ing critical business systems, 
nor does it even have a stan- 
dard definition of what consti- 





| ment of a business 
| enterprise arch- 


tutes a business system. 
“These problems have left 


| the department vulnerable to 


billions of dollars of fraud, 
waste and abuse annually, at a 


straint,” GAO auditors told 
Congress. 

The Defense Department’s 
IT management blunders have 


| also adversely affected U.S. 


military units and service 
members, including those 
fighting in Afghanistan and 
Iraq, according to the GAO. 
The lack of IT management 
at the Pentagon has caused mil- 
itary personnel to experience 
“substantial logistical support 
problems” in Iraq, 
the GAO concluded. 
In a written re- 


| sponse to the GAO’s 


findings, David 


| Norquist, acting 


comptroller at the 
Pentagon, cited the 
continuing develop- 


itecture and a busi- 








EVANS: Leaders 
are “committed to 
transforming the 
[DOD's] business 
ee a 


wrote that “the evidence does 
not support the conclusion 
that the elimination of the 
DREs would have a discrimi- 
natory effect on the visually or 
manually impaired.” 

Cooper also said that the 


| secretary of state’s “decision 


to suspend the use of DREs 
pending improvement in their 
reliability is certainly a ratio- 
nal one, designed to protect 
the voting rights of the state’s 
citizens.” Cooper noted that 
Shelley is responsible for en- 
suring that votes are counted 


1 2-2 
accurately, and requiring a pa- 


per audit trail is one way of 
fulfilling that obligation. 
Cindy Cohn, legal director 
for the Electronic Frontier 
Foundation, called the court’s 
decision a “landmark” ruling. 
“The court said in clear, un- 


| ambiguous terms that requir- 


ing a paper trail for e-voting 


ness IT investment governance 
structure that he said should 
begin to reap benefits during 
the fiscal 2006 budget cycle. 
John Gilligan, CIO of the Air 
Force, said the GAO report 
tells only part of the story. Ac- 
cording to Gilligan, the $19 bil- 
lion that the DOD requested 
for modernizing its business 
systems, as cited in the GAO 
report, also covered infra- 
structure costs such as classi- 
fied and unclassified networks 
and computing centers in both 
U.S. and overseas locations. 
Gilligan said the branches of 


| the military have made sub- 


stantial progress in consoli- 
dating and modernizing their 
business systems, “on a scale 
larger than all but a few of the 
Fortune 500 companies.” 
Karen Evans, the 
White House’s di- 
rector of e-govern- 
ment, said the 
DOD’s leadership 
“supports the presi- 
dent’s management 
agenda and is com- 
mitted to transform- 
ing the department’s 
business opera- 


tions.” @ 48084 


machines is consistent with the 
obligation to assure the accura- 
cy of election results,” Cohn 
said. “That’s an enormous vic- 
tory for secure elections.” 

The plaintiffs in the case did 
not respond to calls seeking 
comment. 

State and local elections of- 
ficials around the country are 
scrambling to ensure that 
e-voting systems in different 





jurisdictions are reliable and 
can be secured from tamper- 
ing in time for the November 
election. 

The decision follows the re- 
lease of a report two weeks 
ago by an IT security panel 
that outlined a strategy for 
certifying the security and re- 
liability of touch-screen DRE 
voting systems [QuickLink 
47931). The systems will be 
used in jurisdictions repre- 
senting about 30% of regis- 
tered voters in the upcoming 
presidential election. @ 48085 
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Siemens Adds to Unified 
Communications Software 


HiPath OpenScape 
Version 2.0 
Siemens Information and 
Communication Networks Inc. 
@ PRODUCT SUMMARY: The 
Boca Raton, Fla.-based sub- 
sidiary of Siemens AG today plans 
to announce an upgrade of its 
presence-aware communications 
and collaboration software, which 
includes buddy-list capabilities 
and provides consolidated access 
to voice, e-mail, instant messag- 
ing and conferencing services. 
Version 2.0 adds a Web services 
tool kit for developing real-time 
communications applications 
based on open standards such as 
the Session Initiation Protocol. 
Siemens said the new release 
also can notify end users when 
someone they need to contact be- 
comes available. Other new fea- 
tures include a text-based user in- 
terface, support for natural speech 
recognition and a rules wizard for 
setting automated changes in 
presence status or communica- 
tions device preferences. 


@ USER EXPERIENCE: America- 
Mideast Educational and Training 
Services Inc., a Washington- 
based company that operates ed- 
ucational exchanges between 
countries and provides language 
training, is using Version 1.0 of 
OpenScape and will upgrade to 
the new release in the fall. Ugur 
Usumi, director of IT at America- 
Mideast, said he wants to take ad- 
vantage of new features such as 
the ability for end users to set 


1 their contact preferences via a 

: phone call. 

; _ America-Mideast has 250 

1 OpenScape users in offices world- 
; wide, and Usumi said one of the 

;_ big benefits of Version 1.0 is that 

! someone setting up a conference 
: call can quickly contact other 

1 workers instead of waiting for 

; them to call in. “It's a scheduling 

4 device, in a sense,” he said. “i just 
figure out the people | need to call.” 
|S ANALYST ASSESSMENT: Ver- 
} sion 1 of OpenScape is presence- 
; aware and supports real-time col- 
1 laboration, but users should see 

; increased capabilities in Version 

1 2.0, said Gartner Inc. analyst Jeff 
: Snyder. “This version brings us 

; closer to unified communications, 
1 especially as companies replace 
; traditional voice switches with IP 
1 telephony,” Snyder said. He 

! added that Siemens has an ad- 

| vantage over its rivals because 

t OpenScape can work with any 

; telephony switch. 
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@ OTHER VENDORS IN MAR- 
KET: Mitel Networks Corp. and 
Nortel Networks Ltd.; Snyder pre- 
dicted that Cisco Systems Inc. 
eventually will enter the market. 


® PRICE: OpenScape 2.0 sells 
for $125 per user for basic pres- 
ence capabilities. Collaboration 
support costs another $125 per 
user; a voice portal can be added 
for $100 per user. 


® AVAILABILITY: Version 2.0 is 
due in early August. @ 48057 


~ Matt Hamblen 








HP Integrity servers are taking off, as are the companies using them. 











Companies adopting HP Integrity servers, powered by industry-leading Intel’ Itanium 2 processors, are seeing remarkable 


gains in performance. The momentum is building. One after another, co 


panies are choosing HP Integrity servers. Leading software and technology partners such as BEA 


Microsoft, Oracle, SAP and Siebel Systems have embraced the platform as an industry standard. And with the ability to manage a mixed environment of UNIX, Microsoft” Windows 


Linux and OpenVMS, HP Integrity servers are fast becoming the ultimate consolidation tool. Demand maximum performance, reliability and cost-efficiency now, on a platform that 


will carry you forward into the future. Demand performance that's real-world proven, and get it—with HP Integrity server solutions 


Choosing HP Integrity servers, choosing results. 


AIRBUS UK: 


Running HP-UX11i 

on HP Integrity servers, 
20-30 wing design 
simulations that used 


COMPUSA: 

Going with 64-bit 
architecture using HP 
Integrity servers, they 
cut access time to 

to take weeks are inventory data by up 
now done overnight. to 85%. 


% y 
ITANIUM 


To get the IDC white paper outlining the performance of HP Integrity servers with Intel Itanium 
processors, go to hp.com/go/demandintegrity5 or call 1-800-282-6672, option 5, menti 


Intel, Intel | the Intel go and Itani re trademarks or registered trademarks of Intel Corporation or its subsidiaries in the U.S. anc 


Corporation. ©2004 Hewlett-Packard Developm: ympany, L.P. 


FIAT AUTO: 


Standardizing on 64-bit 
infrastructure using HP 
Integrity servers, they're 
integrating and enhancing 
sales and service as well 
as streamlining the buying 
process while lowering 
sales cost. 


THE KOEHLER GROUP: 


Moving to an environment 
composed of HP Integrity 
servers, they gained 

a 50% improvement in 


mission-critical performance. 
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OPINION 


MARYFRAN JOHNSON 


Bracing for Backlash 


NE DAY, the political windstorm around 
offshore outsourcing will blow over. 
One day, the inflated numbers on both 
sides of the debate will be debunked. 
One day, the last angry letter from a 
displaced American IT worker will be published. 


Unfortunately for IT 
managers everywhere, 
that day is not today. 

The emotional back- 
lash against any plans to 
outsource technology 
jobs overseas — regard- 


less of how economically Ss 
or competitively driven ates 
MARYFRAN JOHNSON 


— is a force to be reck- 
oned with in today’s IT 
workplace. It dampens 
the morale of even the 
most valuable, talented 
employees, as we saw recently in our 
Best Places to Work in IT survey 
[QuickLink a4610]. One reader sent 
us a note last week suggesting that 
we include “foreign outsourcing sta- 
tistics” in future Best Places reports, 
thereby revealing how many U.S. cit- 


izens are part of the IT head count of | 


the companies on our list. 

Negative reactions can blast back 
from customers as well as from affect- 
ed employees, as Dell and Lehman 


Brothers discovered when they had to 


pull customer service operations out 
of India. Despite a few other widely 
publicized retreats, the majority of 
Fortune 1,000 companies are forging 
relentlessly ahead with offshoring 


plans — albeit with greater stealth, in | 


hopes of avoiding bad publicity. 
The bottom line driving what 
Gartner calls an “irreversible mega- 
trend” is always the same: cost sav- 
ings too compelling to ignore in an 
open, interconnected global market 


place. “To outsource offshore is not a | 


political decision on the part of the 
company. It’s an economic decision 
with political ramifications,” says 
Mike Hoyt, CEO of Paradigm Works. 
He’s one of our sources in “Damage 


editor in chief of Comput- 
erworld. You can contact 
her at maryfran johnson@ _ 


Control” (page 31, and 
online at QuickLink 
47609), a story about 
how IT managers can 
cope with the offshore 


: * backlash. 


One impressive exam- 
ple of a company dealing 
effectively with the back- 
lash problem is Union 
Bank of California, which 
created a “sourcing man- 
agement office” to han- 
dle any concerns that 
might harm its reputation with cus- 
tomers. The office’s duties include 
handling all communications about 
the bank’s offshore plans. 

The preventive measures we dis- 


| cuss in our story basically boil down 


to having honest, frequent, candid 
communication with everyone in- 
volved. CFO magazine gave similar 
advice last month in its cover story 
about offshoring, noting that the ma- 





jority of the 275 financial executives 
surveyed had no intention of cancel- 
ing their offshoring plans, despite the 
backlash. Some 42% of those CFOs 
said they were realizing net savings 
of more than 20% from their offshore 
projects, and 64% were planning to 


increase offshoring levels. 


So where do companies go wrong 


| in communicating their outsourcing 


plans? Let us count the ways. They 
overlook a basic communications 
plan for internal or external con- 
sumption (the offshoring version of 
a “don’t ask, don’t tell” policy). They 


| fail to explain why a given project is 
| going overseas or how such deci- 

| sions are made. They try to down- 

| play the negatives about workforce 


changes. They hide their plans for as 


long as possible, then look guilty and | 


act defensive when the news leaks. 
Some analysts are predicting that 


| the backlash will fade away by next 


year, and I hope they’re right. But in 


| the meantime, IT managers must 


brace for the backlash and deal with 


| it decisively. 


“You don’t want rumor to overtake 
reality,” says Michael Treacy, co- 
founder of Gen3 Partners, an out- 
sourcing consultancy. “In the end, 


| you can only politicize so long, and 
| then the facts will prevail.” @ 48033 
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MICHAEL H. HUGOS 


The Systems 
Builder 


GOT INTO the IT business 

because I love to design 

and build systems. After 
doing a lot of designing and 
building and watching others 
do a lot of designing and 


building, one of the most 
important things I’ve learned is that 
successful projects are always run by a 
certain kind of person. This person 
can speak both the language of tech- 
nology and the language of business. 
This person understands the specific 
business issues that a new system is 
supposed to address and is always 
looking for simple and effective ways 
to use technology to get things done. 
I call this person the 
systems builder. 

The competence 
of the systems 
builder goes a long 
way toward deter- 
mining the success 
or failure of any de- 
velopment project. 

Often, the systems 
builder comes up 
through the techni- 
cal ranks and learns 
about business along 
the way. Sometimes 
the systems builder 
comes up through 
the business side and 
manages to learn 
about technology. 
Either way, this is 
someone who can 
clearly demonstrate skills in two main 
areas: designing systems and leading 
projects to build systems. 

Next month, I’ll discuss the six 
skills that are the basis for success 
in leading projects. But now I’ll look 
at the five basic skills the systems 
builder needs in order to be any good 
in the first area — designing systems. 
There are certainly other skills, but 
without these as a foundation, the sys- 
tems builder can’t excel in the design 
process: 


1. Understand the business operation. 

The systems builder needs to have a 
good grasp of the concepts and rules 
that guide the business operation. This 
means knowing how the operation fits 
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into the overall business, how the work 
of the operation is performed and what 
the cost and profit factors are. 


2. Create an inclusive process. Systems 
builders must be able to consistently 
produce competent (and sometimes 


even brilliant) designs in spite of high | 


levels of complexity in both business 
and technology. Complexity loses 
much of its power to intimidate and 
confuse if groups of people with the 
appropriate skills and experience 

are brought together in a collabora- 
tive process where they can pool 
their collective insights. The systems 
builder is the one who orchestrates 
this process. 


3. Tolerate not knowing. It’s an act of real 
discipline to immerse yourself in the 
details of a situation and resist the 
temptation to rush to judgment. Be- 
cause of the complexity inherent 

in most situations, it’s unlikely that a 
great system design will be the first 
or even the second one that comes 

to mind. 

The systems builder keeps an open 
mind and encourages others on the 
project to do the same as they investi- 
gate the issues. 


4. Look for the simple underlying patterns. 
This is the creative leap where investi- 
gation and analysis give way to synthe- 
sis and the design emerges. At first, 
you're assailed by the surface com- 
plexity of the situation and all the po- 
tential technology that could be used. 
When you allow a range of possible 
solutions to be generated, some pro- 
foundly simple and yet very useful 
insights can emerge. 


5. Use simple combinations of technology and 
process. Beware of the cleverness trap. 
Cleverness means complexity, and 
complex designs are very hard to 
build. Strive to create system designs 
that display an elegant simplicity. Use 
as few technology components as pos- 
sible, and use each component for 
what it does best. 

Use these components to support 
streamlined workflow processes that 
will achieve the performance levels 
needed to effectively respond to the 
business issues that the system is 
meant to address. 


If you are a systems builder or want 
to become one, work at developing 
these skills, and your success rate will 
go way up. If you are an executive who 
sponsors or oversees systems develop- 
ment projects, make sure that a person 
with these skills heads each project. 

@ 47673 


OPINION 


THORNTON A. MAY 


Success With 
Word, Mind 
And Deed 


OR HIGH-LEVEL IT 

managers, career suc- 

cess could be a matter 
of WMDs. 


No, those aren’t weapons of mass de- 
struction. In this case, WMD is short- 
hand for “words, mind-sets and deeds.” 

Words refers to the messages we 
send. Mind-sets are the mental models 
that are at work in our own brains and 
in those of key constituents. Deeds 
refers to how we and key constituents 
behave. 


Words 

Several years ago, the CEO of a major 
software vendor visited Tokyo. Want- 
ing to reach out to his audience of very 
senior IT executives, he decided to 
pull a Kennedy: Just like J.F.K. in Ber- 
lin and Jackie Kennedy in France, he 
would open his remarks in the native 
tongue of his audience. He wanted to 





say, “I am tickled pink to 
be here. I am so happy I 
could die.” 

Instead he said, “I have a 
rash that will probably kill 


| me.’ 


The hygiene-conscious 


| Japanese were in no hurry 


to meet with this CEO. The 
lesson: Have a message that 
matters and is connected to 
what you are trying to do. 
And while it’s always a good 
idea to speak the language 
of one’s audience, it’s also 
important to make sure that 


the message translates correctly. 


| Mind-sets 


| Research sponsored by Lawson Soft- 


ware and conducted at a series of exec- 
utive dinners across the country indi- 
cates that IT leaders with accelerating 


| career momentum have a real-time 


inventory of the IT mental models 
that are at work in and around the en- 
terprise. 


way in which a person thinks about IT 
— values, beliefs, frameworks, stories. 
Successful IT leaders understand 
their personal IT mental models, the 
IT mental models of their internal and 
external customers, and the IT mental 
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models that are at work 
among their competitors. 


Deeds 


Many longtime participants 
in the IT game observe that 
for all our fuss and bother, 
the problems we are work- 
ing on today are much the 
same as the problems we 
were working on 20 years 
ago. This is probably be- 
cause we thought for the 
longest time that our job 
was to deploy technology. 
As new technology became 


| available and expanded what we could 


accomplish with a computer, we de- 


| ployed it. But deploying stuff isn’t our 


real job. Although we're just now step- 


| ping up to it, our real job is to change 


workplace behavior. 
Before starting an IT project, one 


|; should model “before” and “after” 


workplace behaviors. IT success now 


| hinges on how people act — their 
| deeds — not on which technical de- 
An IT mental model is the particular | 


vices were shipped and plugged in. 


@ 47952 
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And Keep It Simple 


ec WILLIAMS’ contribution 
[QuickLink 47099] to your May 
31 letters column speaks volumes 
about how some techies view users 
with distaste and arrogance. Com- 
menting on a column about the per- 
ils of Sasser, etc., Williams’ retort is 
essentially that all one has to do is 
install hardware and software fire- 
walls and disallow a bunch of soft- 


ware and secure-clear administrator 


rights, and so on. 

For the minuscule percentage of 
technically adroit PC owners and 
users, this is certainly all child's 
play. The issue is that the vast ma- 
jority of PCs are operated by folks 
who can no more do those things 
than they can replace the drivetrain 
of their cars. 


If there were a plague of poor as- | 


phalt leading to more accidents, the 
cry would naturally be to improve 
the roads, but for folks of Williams’ 
persuasion, the “simple answer” 
would be to just install extra low 


gears in your car to make it easier 
to drive those “supposedly danger- 
ous” roads. 

Bob Fately 

Partner, Third Wave Inter- 
national, Van Nuys, Calif. 


COR OAR Lok ARN CLEA 


_ Not Rocket Science 


N THE ARTICLE “EU Seeks Quan- 
tum Cryptography Response to 


| thor observes that there are a num- 
ber of technical challenges, includ- 
ing building “sensors capable of re- 
| cording the arrival of photons at high 
| speed.” Because all photons travel 

| exactly at the speed of light, it is un- 
certain why encrypted ones should 
| require special treatment. More di- 
rectly relevant to the apparent prob- 
| lem of unauthorized satellite eaves- 
| dropping would be the simple solu- 
| tion of not leaking communications 
| skyward, where satellites could re- 

| ceive them. Clearly, quantum cryp- 


| tography is not rocket science. 


| 
| John Michael Williams 
| Redwood City, Calif. 








| too; $1. track is highway robbery if 


IMM FOX thinks that in less 
than a decade, the big brick- 


| and-mortar music retailers will be 

| out of business [“The Day the Music 
| Stores Died,” QuickLink 46935] 

| He goes on to cite Internet down- 

| loading and the Apple iPod as the 

| technologies that will destroy music 
| retailing. 

Echelon” [QuickLink 46947], the au- | 
| itwon't be long enough to destroy 


Although 10 years is a long time, 


the music business. Many collectors 
enjoy the liner notes, and these 
don’t come with downloaded tracks. 
But this isn’t the only thing stopping 
the wholesale demolition of music 


| retailers: The technology ain't all 
| that great! My 40GB MP3 jukebox 


died after less than six months. 
What music aficionado wants to 
trust such unreliable technology? 
Even more troubling is the greedy 
music industry. Until it can agree on 
a model and format that works on all 
devices, this transformation won't | 
occur. The pricing needs to be fixed, | 


| Tech Issues Will Delay Music-Store Death 


all I'm getting are some bits and 
bytes and not a tangible disc or tape 
And | want to be able to copy it from 
my PC to my MP3 player to my car to 
a tape and to a CD - multiple times. 
Once I've bought it, it should be 
mine. Let's solve these issues first, 
then we can talk about shutting 
down the CD shops. 

Craig S. Mullins 

Director of technology 
planning, Houston 


COMPUTERWORLD welcomes 


| comments from its readers. Letters 
will be edited for brevity and clarity 


They should be addressed to Jamie 
Eckle, letters editor, Computerworld 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701 


| Fax: (508) 879-4843 


E-mail: letters@computerworld.com 


| Include an address and phone num- 


ber for immediate verification 


For more letters on these and 
other topics, go to 
www.computerworld.com/letters 
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CASE STUDY 
Wireless CRM Takes to the Field 


Pitney Bowes’ new wireless field service 
system gives technicians both a broader 
wireless coverage area and expanded 
access to customer data. Page 24 


SECURITY MANAGER’S JOURNAL 
Four Steps to a Secure Budget 
Our new Security Manager’s Journal 
columnist outlines a step-by-step 
strategy for freeing up funds for 
critical IT security projects. Page 28 


Simplifying NAS Management 
More companies are choosing technol- 
ogy that pools and virtualizes net- 
work-attached storage systems to con- 
solidate NAS management. Page 25 











HRISTOFER HOFF is tak- 

ing no chances when it 

comes to protecting his 

organization against 

worms and viruses. As 

the director of enter- 
prise security services at Western 
Corporate Federal Credit Union (Wes- 
Corp), Hoff has put in place a multilay- 
ered architecture designed to set as 
many barriers as possible between the 
bad guys and his data. 

Apart from the usual firewall and an- 
tivirus tools, the San Dimas, Calif.-based 
company, which has $25 billion in as- 
sets, has also segmented its networks 
and deployed an array of intrusion 
detection and prevention tools, client 
security products and threat-modeling 
software. Such defense in depth is pre- 
cisely what’s needed to keep marauding 
malware at bay these days, say security 
practitioners such as Hoff. 

“The worm 
problem has 
completely 





| catalyzed the relevancy of the informa- 


tion security function,” says Hoff. “It’s 
not about ROI any longer but about the 
reduction of risk on investment.” 

Worms and other malware have been 
around for years. But several trends 
are coming together to make them 


| more dangerous than before, users say. 


= Worm writers are taking advantage of 


newly announced software flaws more quickly, 


giving users less time to defend their systems. 
Last year’s Blaster was considered fast 
when it exploited a vulnerability in 26 
days. This May’s Sasser worm took 17 
days, while the Witty worm in March 
was out in one day. And there have 
been a few “zero-day” exploits, which 


appear before a flaw has been disclosed | 


or a fix becomes available. Their dam- 
age has been limited, but it’s only a 
matter of time before a virulent one is 


unleashed, experts say. “This is a war. 


If the users are to win, they have to 


| beat the clock every single time,” says 


Eric Litt, chief information security of- 
ficer (CISO) at General Motors Corp. 


But companies are still taking an av- 
erage of 60 days to patch their systems, 
which is too long, says Gerhard Eschel- 
beck, chief technology officer at Qualys 
Inc., a Redwood Shores, Calif.-based 

| provider of vulnerability management 

| services. Also, every year half of the 

| most critical vulnerabilities are replaced 
with new, equally serious ones, he says. 

= Exposure to risk is increasing as compa- 

nies connect their secure networks with those 
of partners and other third parties. The bur- 
geoning remote and wireless user pop- 

| ulation adds to the problem. 

| “There are more avenues that can be 

| attacked, which is why perimeter de- 

fenses alone are no longer enough,” 

says Greg Murray, vice president of in- 

| formation security at Information Re- 

| sources Inc. in Chicago. IRI does mar- 

| ket research for some of the world’s 
largest food, consumer goods and 

| pharmaceutical companies. 

= Worms are being released at an ever- 

| increasing rate, and they’re becoming more 

lethal. Four of the five worst mass out- 
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breaks of worms — MyDoom, NetSky, 
Bagle and Sasser — have taken place 
this year. Antivirus firm Symantec 
Corp. has rated more threats at Catego- 
ry 4 — its most severe — in the first 
part of 2004 than it did in all of 2003. 
For instance, MyDoom infected sys- 
tems and then used them as launch 
pads for denial-of-service attacks 
against Microsoft Corp. and The SCO 
Group Inc. Other worms have attempt- 
ed to block infected systems from 
downloading patches and antivirus up- 
dates, while others have been used to 
install back doors and steal data. 

“The day of the digital Pearl Harbor 
that a lot of people have been talking 
about is fast approaching,” says Jamie 
Chanaga, CISO at Geisinger Health 
System in Danville, Pa. 

Preparing for that emergency re- 
quires a security architecture capable 
of automatically detecting and block- 
ing threats, both known and unknown, 
says Litt. “The dominant [antivirus] 
technologies today are those that filter 
out infections based upon signatures,” 
he says. This approach works only 
with known vulnerabilities and exploit 
code. Given the shortening time be- 
tween vulnerability disclosures and 
exploit availabilities, that simply isn’t 
enough, Litt says. 

“The core reason why worms and 
viruses are so effective is that it is not 
always feasible for companies to patch 
production systems right away,” says 
Chanaga. The goal should be to have 


ORE THAN SIGNATURES NEEDED 


Signature-based antivirus technologies 
will continue to play a role in future worm-mitiga- 
tion strategies but won't be as prominent as they 
are now, users say. 

Traditional antivirus products filter out worms 
and viruses by matching patterns in their files. The 
approach is still considered the most effective in 
blocking known threats, especially because 
some worms float around the Internet for years, 
users say. Companies that have kept their virus 
signatures updated have consistently been able 
to avoid even the more dangerous outbreaks. 

However, the technologies don't work against 
previously unknown worms. For such products 
to be effective, vendors need to develop new 
signatures every time a worm appears. This is true 
even in cases of multiple worm variants that may 
all be exploiting the same vulnerability or use the 
same methods. The speed at which vendors can 
deliver such updates is becoming increasingly 
crucial as hackers exploit holes at a quicker pace. 

Users also need a way to constantly poll for 
new signatures to keep their files updated. Be- 
cause of the increase in the number of worms, 
companies have had to dramatically increase the 





enough defense layers so that a breach 
of one layer won’t compromise your 
ability to do business, Litt says. 

In WesCorp’s case, the company’s 
networks have been segmented by ap- 
plication function and business value. 
For instance, all of its SQL servers sit 
on one segment, and its mail servers 
sit on another. Each network segment is 
protected by an array of intrusion de- 
tection and prevention systems, and 
deep packet-inspection firewalls and 
signature-based antivirus technologies 
conduct filtering. 

WesCorp uses a server-based scan- 
ning technology from WholeSecurity 
Inc. in Austin to scan client or partner 
systems for Trojan horses, spyware 
and other malicious code before letting 
another party log into its corporate 
network. A Qualys third-party vulnera- 
bility management service scans for 
holes and helps WesCorp quickly priori- 
tize the assets that need to be protected 
in the event of an attack. Also deployed 


| is software from Skybox Security Inc. 

| in Palo Alto, Calif., that combines fire- 
| wall, router, network and vulnerability 
| data to model attacks. 


Technology from Crossbeam Sys- 


| tems Inc. in Concord, Mass., allows 


WesCorp to consolidate the manage- 
ment of all of its security components. 


| The result is impressive, but not per- 
| fect, security. “We will never be able to 
| bring down the risk to zero,” Hoff says. 


It’s crucial to install host firewalls, 


| virtual private network support and 


j 
i 


t 
‘ 
‘ 
i 
i 
' 
' 
' 
i 
t 
i 
q 
i 
i 
i 
i 
i 
4 
1 
t 
i 
k 
i 
1 
5 
§ 
t 
i 
é 


number of times they check for updates with 
antivirus vendors, sometimes doing so as often 
as once every 15 minutes. “Worms are traveling 
faster than antivirus updates,” says Gerhard 
Eschelbeck, CTO at Qualys. 

In the future, big companies won't be able to 
count on antivirus vendors to win the race, says 
Eric Litt, CISO at General Motors. 

That reality is forcing many of them, including 
GM, to look for technologies capable of detect- 
ing and proactively blocking threats. 

Thermo Electron Corp. a $2 billion manufac- 
turer of medical equipment in Waltham, Mass. 
is planning io deploy a new “memory firewall” 
from Determina Inc., a start-up in Redwood City, 
Calif. Instead of signature matching, Determina’s 
technology uses an application memory scan- 
ning technique to detect and block even 
unknown threats. 

Other products block attacks based on devia- 
tions in network traffic. While such products are 
being offered as alternatives to signature-based 
technologies, experts say it’s too early to predict 
how effective they'll be. 

~ Jaikumar Vijayan 





DISCOVERY/ATTACK LIFE CYCLE 


As this graph illustrates, the window between the time a vulnerability is discovered and the time it is 
exploited is shrinking. Consequently, security teams have less time to identify and fix problems before 


networks are subject to attacks. 


t 
Vulnerability Advisory 
discovered released 


intrusion-detection technologies on all 
endpoint devices and to have ways to 
enforce compliance with clients and 
business partners, says Murray. He 
uses a tool from Check Point Software 
Technologies Ltd. to do all of that. 
“The days when you could simply 
have a titanium outer shell are over, 
considering you have to open your net- 
works to trading partners, vendors and 
other institutions,” Chanaga says. 
Real-time monitoring of the network 
and all systems connected to it is also 
crucial for detecting vulnerabilities 


| and prioritizing responses, says Chana- 


ga, who is using Qualys to do both. 


Lesson Learned 


| Sallie Mae Inc. has revamped much of 


its worm mitigation strategy after be- 
ing badly mauled by the Nimda worm 
in September 2001, says Marc Houpt, 
the company’s information security ar- 
chitect. Since then, Reston, Va.-based 
Sallie Mae has signed up with New 
York-based MessageLabs Inc. to scan 
its 80,000 daily e-mails and filter out 
executable files and other suspicious 
extensions. It has deployed antivirus 
software from Computer Associates 
International Inc. on all servers and 
workstations and has increased the fre- 
quency of its searches for updated 
virus signatures from twice a day to 
every four hours. The company’s 
workstations check with the master 
antivirus server every 15 minutes. 

Sallie Mae’s information security 
team has also been given greater au- 
thority to make spot decisions about 
worms and viruses, Houpt says. When 
MyDoom started spreading, he was 
able to quickly convince his superiors 
to shut down the e-mail servers until 
the problem was fixed. Previously, 
such a shutdown would have required 
“two or three levels of authorization 
and a very strict on-the-spot change- 
control process,” he says. “Now all it 
requires is a consensus between the 
network manager and myself.” 

It’s important to keep certain issues 
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in mind when deploying such a multi- 
layered defense, users say. 

The biggest is the integration of the 
various technology components. 
Where possible, it’s important to use 
buying power to get vendors to do the 
integration for you before agreeing to 
buy a product, Hoff says. 

Having a multilayered strategy also 
does little good without comprehen- 
sive analytical and reporting capabili- 
ties to interpret and present the infor- 


| mation that’s gathered by such sys- 


tems, Murray says. 
“More security technologies doesn’t 
make you more secure; better manage- 


| ment does,” says Sam Curry, a vice 
| president at CA. 


And don’t underestimate the sup- 
port issues. For instance, integrating 
security into endpoint devices will in- 
evitably result in more calls to the PC 


| help desk, requiring the information 


security group to assume responsibili- 


| ty for some of the cost burdens as well, 


Hoff says. So end-user training is an 
essential component of any worm miti- 
gation strategy. 

Ironically, regulations can sometimes 
get in the way. For example, Geisinger 
is unable to deploy much-needed patch- 
es and antivirus software on exposed 
Windows-based clinical systems be- 
cause it will break the FDA certifica- 
tion on those systems, Chanaga says. 

The effort also needs to be balanced 
against business needs, Houpt says. For 
instance, when the information securi- 
ty team gets the authority to shut 
down crucial servers, it must have a 
very good understanding of a prob- 
lem’s potential effect, he says. 

“Your infosec team needs to have the 
technical know-how and the credibility 
to make an impact assessment, and the 
user teams need to be able to trust that 
knowledge,” Houpt says. @ 47711 
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Kes tothe Field 


Pitney Bowes revamped field service system 
provides broader wireless coverage while 
giving technicians access to more customer 
information. BY MARC L. SONGINI 


HILE MANY companies 
are still testing large- 
scale wireless CRM proj- 
ects, Stamford, Conn.- 
based mailing systems 
vendor Pitney Bowes Inc. 
is an experienced practi- 
tioner. The $4 billion company set up 
its first wireless system in the late 90s. 
Since then, it has deployed a second- 
generation system for 250 field service 
employees in its Document Messaging 
Technologies division, which sells 
high-end inserter mailing systems. 

Now the company is wrapping up a 
more sophisticated wireless CRM roll- 
out for its Global Mailing Systems divi- 
sion, where some 1,500 wired employ 
ees service Pitney Bowes machines de- 
signed for the low-volume distribution 
of mail. 

The newest system connects field 
service representatives to its back-end 
call center and service applications. 
Using pocket PCs, RIM 957s from Re- 
search In Motion Ltd. and other de- 
vices, service technicians can access a 
wide range of data from multiple back- 
end systems. Such data includes infor- 
mation about inventory availability 
and whether calls are billable or cov- 
ered by contract. 


Early Start 


The company’s first wireless CRM sys- 
tem was more limited. It relied on Mo- 
torola Inc. “brick” client devices that 
connected to homegrown CRM sys- 
tems, and it retrieved service call data 
over Motient Corp.’s wireless data net- 
work, says Ralph Nichols, service pro- 
gram manager at Pitney Bowes. 

In 1999, the company began moving 
to low-cost RIM devices and started 


| call center back end, says Mark Davis, 

| vice president of customer service. 

In 2001 Pitney Bowes installed field 
| service software from San Mateo, 

| Calif.-based Siebel Systems Inc. for its 
| Document Messaging division, and it 

| upgraded to cellular wireless service 
from Atlanta-based Cingular Wireless, 
| which uses General Packet Radio Ser- 
| vice (GPRS) technology. 

For wireless connectivity middle- 
ware, Pitney Bowes uses software and 
services from Antenna Software Inc. 
Antenna A3 and SmartClient field ser- 
vice software links field workers with 
RIM handheld devices to Siebel sales 
force automation software and Pitney 
Bowes’ parts ordering system 

Network coverage was important, so 
the company tested several carriers 
and devices before settling on Cingu- 
lar’s service and RIM’s handheld de- 


| 
| 
| 
| 
| 
| 


message into XML 
format. The message 
then passes to the 
Siebel system, which 
automatically updates 
inventory, billing, 

call center and other 
back-end systems. 


work on an integrated field service and | 


| 
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Customer sites 


| will find ways around it,” 


vices. Jersey City, N.J.-based Antenna 


| was the logical choice for gateway soft- | 


ware and services, says Paul Weston, 
vice president of CRM at Pitney 
Bowes. Its software had the most fea- 
tures, included systems management 
tools for troubleshooting breakdowns, 
supported multiple carriers’ network 


| and was already Siebel-approved. 


Ensuring the convenience and us- 
ability of the devices was also key. “If 
the thing is difficult to use, the people 
says Weston. 
So the staff made sure that menus on 
the RIM devices were easy to navigate 
and included special product codes to 
help users place inventory orders. 

The workflow starts in the system 
when a customer calls the contact cen- 
ter to place a field service request. The 
Siebel application identifies the prod- 
uct needing repair, selects the repre- 
sentative to dispatch and pushes the 
request out to that technician’s wire- 
less device. The recipient then ac- 
knowledges the receipt of the order. 

Messages from the devices are rout- 
ed to Antenna’s wireless gateways in 
New Jersey. XML-formatted data is 
then forwarded over a frame-relay or 


| VPN connection to Pitney Bowes’ data 


center, where it passes through a gate- 
way server before being routed to the 
back-end applications. 

The system delivers customer data 
to field service personnel in near real 
time, including the service history for 


| a given customer or piece of equip- 


ment. It also tells the technician 
whether work is covered by contract 
or is billable and feeds data for billable 
work into the company’s billing sys- 
tem. When parts are required, the 
Siebel field service application deter- 


In Pitney Bowes’ Global Mailing Systems division, field service staffers use handheld devices 
running Antenna SmartClient software to access customer information over asecure VPN 
connection. Information passes to a system running MQSeries middleware that converts the 
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mines if the part is in stock and sends 
information on parts the technician 
uses to a legacy inventory application 
that in turn connects to the company’s 
SAP supply chain management system. 
For areas where wireless coverage is 


| spotty, client devices either use a dial- 


up connection or store information 


| and forward it later. 


Weston says that better information 
has allowed field service staff to solve 
problems faster and complete more 
calls per day. Managers now can get 
up-to-date reports on what activities 
service personnel are engaged in and 
what steps were taken to satisfy cus- 
tomer requests. And by flagging the 
problems that require the most techni- 
cian time, Pitney Bowes has been able 
to save money by scheduling proactive 
maintenanice calls. 

The company is nearly done rolling 
out a similar system in its Global Mail- 
ing Systems operation. The newer sys- 
tem features smart cell phones, RIM 
957s, pocket PCs or other handhelds 
and GPRS services provided by several 


| carriers. By using a mix of carriers and 


handheld devices with Antenna’s 
SmartClient software, Pitney Bowes 
estimates that it can cover 95% of its 
territory, up from 85% with the previ- 
ous system 

The Global Mailing unit’s system is 


| similar to that of the Document Mes- 


saging group, but it’s completely sepa- 
rate. “There is a uniqueness between 
the organizations,” Davis explains. 


| “I’m more distributed [than the Docu- 


ment Messaging unit] with a greater 
breadth.” 
The Global Mailing rollout also was 


| about five times more costly than that 


of the Document Messaging unit’s sys- 
tem. The Global Mailing system uses 
more expensive Windows CE-based 
handhelds and required more exten- 
sive integration with the company’s 
SAP, billing, call center and other ap- 


| plications. With this setup, Pitney 


Bowes hopes to create a single system 


| of record and avoid re-entering the 
; same data in different systems. With 


the resulting productivity gains, the 
company expects the system to pay for 
itself in three years. 

Weston has some advice for others 
trying to build similar systems: Test 
the hardware and software thoroughly, 
make sure the devices have adequate 


battery life, and plan for the change 


management such a project requires. 
“The key,” he says, “is understanding 
how these processes interact with the 
rest of your business and understand- 
ing that it’s not just field service. It af- 
fects sales.” @ 47707 
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meet and capitalize on the 
serendipitous exchange of 
ideas...” 

John Seely Brown 

Former Director, Xerox Palo Alto 


Research Center (PARC), and for- 
mer Chief Scientist, Xerox 


“» SNW is a great venue for 
peer discussion ... an opportu- 
nity to provide feedback to 
vendors on what users need 
from them ... | sat down with 
my key vendors and shared 
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Please check ONE of the following: | Earlybird Registration 
| ree 
(} | am an IT End-User* | Q $895 


(Complete Attendee Profile below) | 
| QO $1,290 


(-] | am a Channel Partner/ 


Integrator/Consultant 
(Compiete Attendee Profile below) 


| Q $3,000 


Attendee Profile: 


Your Business/industry 


Your Job Title/Function 


’ 


Q 
3M 
4 
a 
a 
a 
3 
3 
3 
2 
av 
a 
4 
a 
Q 
a 
a 
4 
a 
aM 
a 
a 


(_] My company is Sponsoring/ | 9 $895 


Exhibiting at SNW 


| Q $1,290 


If not indicated on your business card, please 
provide the following required information: 


Registration questions? 


Need accommodations? 
www.etcentral.com 


| Full/Onsite Registration 


Q $1,295 


| Q $1,690 


Q $3,000 


The one item that best describes your involvement in the 
IT purchase process 


Number of employees in your entire organization (ALL locations) 


What is the estimated annual revenue of your entire 
organization? 


| O $1,295 


O $1,690 


C) | am a representative of a Non-Sponsoring IT Vendor Company 


QO $5,000 Business Development Professional Package 


C) | am a Financial/Equity Analyst and/or Venture Capital Professional 
QO $1,290 (through Sept Q $1,690 


al 4-l 


CL) | am a qualified member of the press. 


ress should call Erin Keefe at fe) 


Please fax this completed application 
to 1-508-820-8254 


Your organization's annual IT/IS budget for all IT/IS 
products, or if you are a Channel/Integrator Partner or 
Consultant, what is the annual dollar value of IT prod- 
ucts/services you sell/resell/recommend/influence for 
purchase by your customers/clients. 


Annual company IT budget (storage products and services) 


Would you like to receive information about playing in 
the golf outing on Monday, October 25th? 

4 

4 


Payment Method 


Check 


American Express VISA —) MasterCard 


Cancellation Policy 


written notification 
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IKE STREB RECENTLY found 
himself with a problem 
that’s common to IT man- 
agers who consolidate data 
from file servers on net- 
work-attached storage de- 
vices. After years of growth, 
he wound up with 100 different NAS 
file systems to manage and faced in- 
creased downtime when he had to add 
application servers or update code. 

The answer for Streb and a growing 
number of users like him is to pool or 
virtualize the NAS infrastructure. 

Streb, vice president of IT services 
at Warner Music Group, installed intel- 
ligent switches on his network to gen- 
erate a global namespace, or distrib- 
uted file system, that creates a logical 
layer between servers and the NAS 
boxes that store their files. A global 
namespace spans multiple file systems 
but appears to end users as a single lo- 
cal drive on their computers. 

Other storage administrators are 
opting for an appliance that sits in 
front of NAS devices and creates a log- 
ical view by pooling multiple NAS fil- 
ers behind it. Policy-based engines 
contained in intelligent switches and 
appliances from companies such as 
Acopia Networks Inc., NuView Inc. 
and BlueArc Corp. can automatically 
balance I/O streams and capacity be- 
tween servers and increase or move 
storage volumes without disrupting 
workflow. 


Complication of NAS Growth 
The NAS market has grown to $14.7 bil- 
lion because the technology is easy to 
install and manage, according to mar- 
ket research firm IDC. But as storage 
needs grow, companies continue to in- 
stall box after NAS box, and each re- 
quires individual management. 

Over the past two years, adoption of 
NAS virtualization technology has 
been slow, according to Arun Taneja, 
an analyst at Taneja Group Inc. in Hop- 
kinton, Mass. But interest among users 
has picked up in recent months, mainly 
because of the maturity of the NAS 


NuView Inc. 


RKS: The appliance 
creates a global na ) 


| 
| 
| 
| 
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SIMPLIFYING 
NAS MANAGEMENT 


Companies are using technologies 
that virtualize multiple network- 
attached storage systems into a 


storage pool. 


market. Now that many companies 
have “hundreds” of NAS boxes to man- 
age, individual administration has be- 


| come a nightmare, Taneja says. 


To deal with that problem, New 
York-based Warner Music last month 
purchased two ARX1000 NAS virtual- 
ization switches from Acopia to handle 


| millions of wav, MP3 and graphics files | 


on 128 Unix and 350 Wintel servers. 
Streb also plans to install four Celerra 


| NSG6OO NAS servers from EMC Corp. 


as back-end storage. 


Streb has five storage administrators | 


who manage the distribution of files 
across Warner Music’s NAS devices. 
That task alone takes up about 20% 


| of their time, he estimates. “Now, 


through a policy engine, I can migrate 
the data from one box to another and 
take a brief outage by pointing the 
global namespace somewhere else, 


| and the user doesn’t even know it be- 
cause it’s all done behind the scenes,” 


Streb says. 

Streb is testing Acopia’s switches 
on 20 Wintel servers and says he plans 
to complete the installation over the 
next two weeks. He also says that he 
hopes virtualization will open his data 





center to more storage vendors. 

“In the past, it’s been really compli- 
cated for me to introduce something 
from BlueArc or Network Appliance 
without creating too much manage- 
ment pain for me,” Streb says. “Now I 
feel comfortable opening up the door 
to additional storage vendors and let- 
ting them compete more.” 


Different Approaches 


Acopia’s switches sit in-band between 


| end users and file servers or NAS de- 


vices in the I/O stream, while products 
such as NuView’s StorageX software 
reside on a Wintel server out of band, 
directing files to the appropriate NAS 
device or volume within a file server. 
StorageX is resold by Network Appli- 
ance Inc. under the name Virtual File 
Manager (VFM). 

Mike Karp, an analyst at Enterprise 
Management Associates Inc., a con- 
sulting firm in Boulder, Colo., says the 
argument for in-band versus out-of- 
band devices is moot, and users should 
pay more attention to how well a de- 
vice or software eases management of 
NAS devices. 

“Typically, the knock on in-band 


Acopia Networks Inc. 


5, 
COMPUTERWORLD July 12,2004 20 


technology is that it eventually be- 
comes a choke point, but I rarely talk 
to a company that says ‘I’ve maxed out 
pipeline to my NAS,” Karp says. 
“Clearly, what you need is some kind 
of common interconnect, so com- 
mands — no matter what kind of stor- 
age you have — go out and manage the 
various units in the storage pool.” 

One problem with managing multi- 
ple NAS devices, Karp says, is that file 
servers based on Windows use the 
Network File System protocol to com- 
municate over a network, and servers 
based on Unix or Linux use the Com- 
mon Internet File System. The indus- 
try should agree on a standard way for 
servers to make requests for files or 
services over the network, he says. In 
the meantime, storage managers con- 
tinue to virtualize Unix and Windows 
environments separately. 

Clay Raedeker, a systems adminis- 
trator at Bectel SAIC Co., says he re- 
cently purchased VFM and a second 
FAS960 NAS file server from Network 
Appliance to help control file distribu- 
tion from more than 70 file servers 
with a combined total of 12TB of data. 
Las Vegas-based Bechtel SAIC is the 
prime contractor for the U.S. Depart- 
ment of Energy’s program to use Yucca 
Mountain in Nevada as a repository for 
spent nuclear fuel. 

Raedeker says he currently has to 
come to work in the early morning 
when no one is accessing files so he 
can spend two or more hours remap- 
ping users when he adds servers or 
expands capacity. 

“We’re trying to map individual 
users to individual shares and individ- 
ual servers, and it becomes extremely 
difficult to manage,” he says. “Just con- 
tacting people and putting proper no- 
tices out is hard enough.” 

With the Network Appliance instal- 
lation, Raedeker says his staff will be 
able to map to a shared file in a com- 
puter at any time, without having to 
specify the storage device it’s on and 
“without having to interact with users 


at all.” @ 47734 
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ROBOT 


oo 


rit wars, drive cars and 


nters. By Lucas Mearian 








Robots, from 

mechanical 
WATCH@ dogs that can 
to automated vacuum cleaners 
that avoid furniture, are steadi- 
ly becoming a part of everyday 
life. But the real robot boom lies 
just ahead, experts say. 

In the future, robots could 
help determine the outcome of 
wars and identify problems in 
data centers. Office buildings 
may come to life as they use 


This 18-in.-high robot rolls 
around HP data centers 
and finds hot spots, using 
temperature sensors. 


Wi-Fi to dinpatch robots to con- 
| trol human access, test heating 
| and cooling systems, and fetch 
learn new tricks | 


tools for workers. 
Computerworld recently 

spoke about the future of robots 

with three experts: Chuck Thorpe, 


| director of Carnegie Mellon 

| University’s Robotics Institute; 
Jeanne Dietsch, CEO of Mobile- 

| Robots.com in Nashua, N.H.; and 


Vijay Kumar, a professor in the 
Department of Mechanical En- 


| gineering and Applied Mechan- 





TECHNOLOGY 


ics at the University of Pennsyl- 
vania. Here’s what they said: 


WHERE WILL ROBOTS SERVE IN 
THE FUTURE? 

KUMAR: They’ll fight our wars. 
My robots will fight your ro- 
bots. It’s like playing chess. 
It’ll be an expensive game, but 
I think it will minimize loss of 
life. I don’t know it’s some- 
thing our leaders want to hear 
about, though. 


| WHAT'S THE FUTURE OF ROBOTS 


IN THE SERVICES SECTOR? 
THORPE: That’s the real fron- 
tier for robots — getting them 
out of the manufacturing world 


| and interacting much more 
| with people in our day-to-day 


chores. That’s a little tougher. 
If you think about an assembly 
line, it’s set up so that every- 
thing is predictable. If you 
think about the job of creating 


| ° 
a robot butler to operate in 
| your house, the difference be- 


tween pile of clothes which 


| should be picked up and a 


sleeping cat which shouldn’t be 


| picked up is a little bit tricky. 


The manipulation skills re- 


| quired to make a bed — flip- 

| ping up the corner of the mat- 
| tress and tucking in a sheet so 
| it looks straight — is compli- 

| cated. Some of those jobs will 


take a long time before robots 
can really do them as well as 
people do them. 

To really have a humanoid 
robot walking around like 
C-3PO or like Rosie on The 


| Jetsons is still a long ways off. 


DECADES? 


THORPE: Probably. 


| CAN ROBOTS HELP INFORMATION 

| TECHNOLOGY? 

DIETSCH: Hewlett-Packard uses | 

lab have spun off a company 
that makes a little TV camera 


our PatrolBot in their data 
centers. It’s got temperature 
sensors. It drives around sev- 
eral times a day, and the data 
from these patrols is used to 
create 3-D models of the heat 
in the facility. If there’s a prob- 


| lem in the facility, the comput- 


er or a human can send the ro- 
bot out to check on it. 

Our robots are computers on 
wheels. When programmers 
start realizing, “Oh, I can drive 
my computer around and make 
it do things,” they’ll come up 








JEANNE 
ey ee 


with all sorts of interesting 
things. For example, they could 
keep track of any asset in the 


| facility based on RFID tags. 


WHAT'S HARD ABOUT MAKING 
ROBOTS ACT LIKE HUMANS? 
THORPE: I think you could turn 


| that question around and say, 


“Wow, humans are a lot more 
complicated than we thought.” 
We're striving for a couple 


| different things with robots. 
| Sometimes we’re trying to 


make them very much like hu- 


| mans, and sometimes we’re 


trying to make them be a lot 


| better than humans. Where 

| we've had our greatest success 
| is when we let the robots be ro- 
| bots and do what they’re best 


at and let humans be humans 
and do what they’re best at. 
A couple of guys from my 


that watches the road as you're 
driving. It doesn’t drive your 
car, but it’s there to watch, and 
if you start to get sleepy and 
start to drive off the road, it 
will beep at you and wake 

you up before you become 


| an accident statistic. 


WHAT ELSE ARE YOU WORKING ON? 
THORPE: We've got 61 faculty 
members with 120 projects. 
We've got robots doing every- 
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thing from cleaning paint off 
ships to search and rescue in 
hazardous environments. We 
have snake robots that can 
crawl through skinny little 
holes, and great big military 
scout robots. We have teams 
of robots playing soccer. 
That’s a great way to study 
teamwork: How do robots co- 
ordinate to tackle a project? In 
the latest version of that, we 
have a team that consists of 
robots and people; how do ro- 
bots and people collaborate to 
solve a difficult task? 


CAN YOU SPECULATE ON SOME 
OF THE MORE FAR-OUT APPLICA- 
TIONS FOR ROBOTS? 

KUMAR: My colleagues would 
argue the biggest opportunity 
for robots is in entertainment. 

There are many, many 
prototypes of robots that are 
intended to be domestic com- 
panions. They walk like hu- 
mans and talk like humans, 
but unlike pets, they don’t 
dirty up your apartment. 
DIETSCH: Our robots are made 
to work indoors. We’re work- 
ing next toward working out- 
doors. Everyone thinks GPS 
has solved the problem for 
robots, but it hasn’t at all. If 
you're under tall buildings or 
trees, GPS is not reliable. 

The problem with working 
outdoors is that you’re working 
on three-dimensional terrain. 
Going from building to build- 
ing, depending on terrain, is 
not so bad. I’m hoping we can 
do that in one to two years. Fol- 
lowing streets and sidewalks — 
if we can do that reliably in 


| three or four years, that will be 


good. But we'll still not be able 
to avoid cars going 40 mph. 
THORPE: Certainly, within 25 
years, we'll have robots assist- 
ing surgeons to be more pre- 
cise, robots enabling elderly 
people to live in their houses 
longer and not have to go into 
nursing homes, [and] robots 
doing a lot of the dull jobs we 
don’t like to do, so we can have 
more fun and do the more in- 


teresting jobs. @ 47844 


REMOTE BRAINS 


Robots don't have to carry their brains 

with them. See why online: 
QuickLink 47835 
www.computerworld.com 
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Every year the prestigious American 


Society of Business Publication Editors 


(ASBPE) selects one publication with 


- 80,000 or more subscribers to receive 


this top honor. The award can go to any 
business publication in any industry 


_ category, and we won! We are proud 


that our ongoing commitment to 


editorial integrity, audience focus 


and in-depth coverage has been 


recognized by this auspicious award. 
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Secure Budget 


Aseasoned security manager offers 
hard-nosed advice on how to get critical 
IT security projects funded. By Roger Foix 


FTER working as an in- 

house security manag- 

er in the financial ser- 

vices industry for many 
years, I recently moved to con- 
sulting work. This will give me 
the opportunity to work ina 
variety of industries (my cur- 
rent contract is with a compa- 
ny in the health care industry) 
and projects. 

I’ve spent the past few days 
thinking about the many is- 
sues I face, trying to decide 
which one to discuss 
in this, my first col- 
umn. In the end, it 
was an easy decision: 
extortion. I’m not 
talking about pre- 
venting employees or 
outsiders from steal- 
ing funds. I’m referring to my 
ability to “extort” appropriate 
funding from management. 

There are less-cynical ways 
of looking at the budgeting 
process, but my experiences 
over the past few years at dif- 
ferent companies have made 
getting blood out of a stone 
look simple in comparison. 

Many security managers 
labor under the misapprehen- 
sion that the budget process 
consists of working out how 
much you need, spending a 
few weeks coaxing your fig- 
ures into the bizarre formats 
that the finance group re- 
quires, then defending your 
important projects in meet- 
ings. But my successful bud- 
gets have been the result of 
a different process — one in 
which I laid the groundwork 
well ahead of time. Here are 
four steps I follow to obtain 
funding from that parsimo- 
nious corporate bean counter. 


jake the 
USINESS 
Start by going back to your se- 
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curity basics and calculating 
your risk profile. Determine 
the potential financial loss 
arising from each of your 
threats, and multiply that by 
the annualized percentage 
likelihood of the loss occur- 
ring to get the annualized loss 
expectancy (ALE). Then 
demonstrate how much your 
project will reduce the ALE — 
and how much money it will 
save the company. 

Assuming you have a sound 
business case, docu- 
ment this clearly, ex- 
plain your reasoning 
in great detail, and 
then submit it to the 
finance people. It 
will get rejected al- 
most immediately, 


| of course, because no one in 


finance will understand a 
word of it. But don’t worry; 


| you have to go through this 


step only to show that you’ve 
done your homework and to 
lay the groundwork for more 


| productive tactics later on. 


| introduce FUD 


Next, use fear, uncertainty and 


| doubt to your advantage. FUD 
| is the most important acro- 
| nym to salespeople hawking 


IT security wares, and you are 


| trying to sell your own IT se- 


There are less-cynical 
ways of looking at the 
budgeting process, but 
. . . getting blood out 
of a stone looks like 
a simple task in 
comparison. 





curity services to the corpo- 
rate bean counters. Sow fear 
(“Did you hear about that 
hacker who broke into NASA? 
I hope that doesn’t happen to 
us.”), uncertainty (“Yes, I 
know we spent $500,000 on 
securing our network perime- 
ter last year, but we need to 
make sure it’s working.”) 

and doubt (“70% of security 
breaches are internal. I won- 
der who the criminals are in 
our company?”). Sometimes 
this beginner’s tactic works, 
but any chief financial officer 
who has been around the 
block a few times will blow 
FUD out of the water. Still, it’s 
still worth trying just to see 
what answers you get. You can 
always use those responses 
the next time an IT security 
salesperson comes calling. 


Befriend Your Auditor 


The next time you pass an au- 
ditor in the corridor, give him 
a big smile. These people 
write long-winded reports, 
and while no one reads the 
main text, everyone reads the 
executive summaries. Then 
these reports go on file, as do 
management’s responses. Best 
of all, the auditors eventually 
check back to see whether 
management has addressed 
the issues the reports have 


| raised. 


While the threat of a hacker 
attack or a virus infestation 
makes the budget gods ner- 
vous, the thought of three 
years’ worth of audit reports 


| pointing a finger at their in- 


competence will give them 
night sweats. A scared budget- 
setter is a generous budget- 
setter, so your internal audi- 
tors are a major ally. The same 
goes for external auditors and 
your compliance team, too, if 
you’re in a regulated industry. 
So make friends with these 
people. That should be easy, 


| since everyone else tries to 


avoid them. Then drop a few 
choice lines into the conversa- 
tion like, “I'd really appreciate 
your opinion on our firewall 
setup.” In no time at all, you’ll 
have auditors crawling all over 
the areas in which you want to 
spend money. Six months lat- 
er, senior management will get 
a report saying how dire the 





problems are in that area. 
Then, seven months later, 
you'll submit your budget re- 
quest for money to address 
those issues. 


Choose Your Allies 
Every company has its alpha 
dogs, and they’re rarely in IT. 
You may think that the CIO is 
at the top of the food chain, 
but in budget meetings, every- 
one complains to him about 
how much IT spends and how 
the help desk still can’t sort 
out the small issues. This dis- 
cussion invariably comes up 
just before his $17.5 million 
request to fund a project that 
even he doesn’t understand 
properly. 

The CIO has a hard fight, so 
you must look elsewhere to 
find your alpha dogs. In soft- 
ware houses, they’re the sales- 
people; in investment banks, 
they’re the senior traders; in 
pharmaceuticals, they’re the 
research and development 
folks. Set up meetings with 
them and tell them what you 
need, using no more than two 
technical terms in any one- 
hour meeting. Then tell them 
what might happen to the 
company if security fails. 

Three months later, when 
the budget cycle starts, submit 


| your request to the CIO. He'll 


go into meetings expecting 
the usual beating, but this 
time the alpha dogs will be de- 
manding to know why he isn’t 
spending more on security. 
He’ll have the answers on 
hand, you’l) get your funding, 
and everyone will go away 
happy — or as happy as any- 


| one can be after a three-hour 


budget meeting. 

So there you have it: the 
four key steps to budgeting 
success. Good luck, and re- 
member to get started now. 
If you do, you may just be in 
time to get the money you 
need for next year. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Roger Foix,” whose 
name and employer have been disguised 
for obvious reasons. Contact him at roger. 
foix@hushmail.com or join the discussion 
in our forum: QuickLink a1590 


To find a complete archive of ou: 
Security Manager's Journals, go online to 


@ computerworld.com/secjournal 
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MontaVista Readies 
Linux Tool Kit 


Next month, MontaVista Software 
Inc. will unveil its Linux Profes- 
sional Edition Application Devel- 
opers Kit, which is designed for 
building applications to run on 
MontaVista-embedded Linux. The 
Pro ADK too! set is built around 
MontaVista’s Eclipse-based inte- 
grated development environment 
and includes core MontaVista 
Linux software libraries and 
header files, according to the 
Sunnyvale, Calif.-based company. 
Developers can use the tool kit on 
Windows, Solaris or Linux work- 
stations. Pricing starts at $3,000 
per developer. 


IBM Unit Moves 


To Hyades Platform 


IBM’s Rational Software division 
announced last week that it will 


standardize its suite of automated | 


software-quality tools on the 
Hyades open-source platform. 
The Hyades project is a subgroup 
of the Eclipse open-source proj- 
ect that IBM spun off as an inde- 
pendent, nonprofit corporation. 
By supporting Hyades, Rational 
plans to provide third-party ven- 
dors and IT organizations with a 
standard platform on which to 
build products that will work with 
its testing tools. 


NLayers Aims For 


App Optimization 


NLayers Inc. last week announced | 


nLayers InSight, an appliance 
designed to provide application 
optimization. Working without 
agents, the appliance tracks ap- 
plication relationships, dependen- 
cies, usage, demand and service 
levels over time. InSight provides 
policy-based notifications, alerts 
and recommendations through a 
troubleshooting dashboard, ac- 
cording to San Jose-based nLay- 
ers. The appliance also tracks ap- 
plication usage, demand and ser- 
vice levels. Available now, InSight 
costs $45,000 for a perpetual li- 
cense or $2,438 per month for a 
subscription. 
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E-votine’s Rush 


TOE 


N THE WAKE OF the painful experiences of 
2000, the choice of the mechanism used to 
record and tally votes in this year’s presidential 
election may be almost as controversial as the 
battle between the candidates. Unfortunately, a 


hefty portion of state and 
local jurisdictions have 
prematurely adopted elec- 
tronic voting systems. 

E-voting in this year’s 
election is a terrible idea 
because of both real tech- 
nical limitations and the 
perception that the systems 
are unreliable and vulnera- 
ble to tampering. That’s 
something of a problem, 
considering more than 30% 
of all voting in the election 
will be done on electronic machines. 

This isn’t just a public relations is- 
sue or one that will go away when citi- 
zens get used to the technology. A 
mounting record of problems with 
e-voting has tarnished elections in 
Georgia, California and Texas, among 
other places, and seems to justify 
widespread voter skepticism. 

Part of the problem arises from the 
complexity of e-voting systems. The 
code that makes up these systems is so 
large that there’s no efficient way for 


election officials to ensure that it’s free | 


of malware or to completely debug it, 
according to testimony Johns Hopkins 
University professor Avi Rubin gave 
before the U.S. Election Assistance 
Commission this spring. 


The technology simply isn’t ready to | 
| to both harden the defenses of DRE 

| voting systems and put to rest some of 
| the public’s basic fears about vote tam- | 


be used for the most basic and critical 
function in any democracy. And even 

if it were, the processes and protocols 
needed to monitor even high-perform- 
ing systems aren’t in place, judging by 


the report from IT security experts as- | 


sembled by the Brennan Center for 
Justice at New York University School 


of Law and the Leadership Conference | 


on Civil Rights. The pan- 
el’s mandate was to devise 
a strategy for ensuring the 
security of touch-screen 
direct-recording electronic 
(DRE) voting systems. 

The recommendations 
of the group are all emi- 
nently sensible: Train all 
election workers on securi- 
ty procedures. Develop 
random testing procedures 


to detect malicious code or | 


bugs in e-voting software. 


| Create and follow standardized proce- 


dures for responding to security 


threats and incidents. You get the idea. | 
| But it’s a little alarming that the panel 
| had to make these recommendations 
| to fill an existing procedural gap. 


To be fair, the chief recommenda- 


| tion of the panel isn’t so obvious, and 
| following it is essential to the success 


of any e-voting system. According to 


| the report, each jurisdiction that plans | 
to use an e-voting system should hire a | 
| well-qualified independent security 


group to evaluate the system’s poten- 
tial for failure and vulnerability to at- 
tack. The outside security team should 


| be free of ties to systems vendors and 


be given unlimited access to software 
code and configuration information. 
This is precisely the right approach 


pering. If an expert outsider can take a 


| hard look at the code on a Diebold vot- | 


ing system, fewer citizens will be wor- 
ried about, say, whether Diebold 


| Chairman Walden O’Dell’s support of 


President Bush (he’s a big fund-raiser 


ure 


for Bush’s campaign) might have influ- 
enced the system’s design. 

But most jurisdictions haven’t put any 
of the recommendations in place, and 
it’s too late to get it all done by Novem- 
| ber, as has been pointed out by a chorus 
| of security experts [QuickLink 47931]. 

The headlong rush to e-voting grew 
out of demands for reform following 
the chaos of the 2000 presidential 
election. The $4 billion allocated by 
the federal government to enact those 
reforms got the attention of vendors 
that were eager to make a big sale. It’s 
| time to slow down, even if it means 
shelving e-voting until 2008. 

Setting up a parallel paper trail for 
| voters within an e-voting system, as 
some have suggested (including Com- 
puterworld’s Sharon Machlis — see 
| QuickLink 47905), is not the answer. 
| That would be cumbersome, threaten 
the secrecy of the ballot and still leave 
the system open to tampering. Which 
is why a federal judge’s decision last 

week to uphold California’s decertifi- 

cation of DRE systems until vendors 
provide voter-verifiable paper audit 
| trails and other security improvements 
[QuickLink 48022] isn’t enough. 

In four years, processes could be in 
place that force transparency on all 
vendors of e-voting systems. The use 
| of blind-signature encryption proto- 
cols could preserve secret balloting 

while giving voters a means to verify 

election results. There’s not much up- 
| side in using e-voting systems for the 
election that’s less than four months 
away, and the risks are enormous. 

If you thought pregnant chads in the 
2000 election were bad, wait until you 
see what a determined hacker could 
do to the democratic process this fall. 
| That is, of course, if we’re lucky 
enough to detect the attack. @ 48002 





| WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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Q7Z12.04 








MANAGEMENT — 


Q&A 
Managing ‘Real’ Risk | 
Risk management is an idea whose time has 
finally come, says Cutter Consortium ana- 

lyst Tom DeMarco (left). He explains how 
project managers can help their businesses 


Q&A 

Moving Targets 

Companies go through innovation stages, so IT needs 
to provide the right help at the right time, says Geoffrey 
A. Moore of TCG Advisors. Depending on the stage, 
the company may need IT to support collaboration or 


OPINION 

Regenerating IT 

Amputating a “broken” IT shop through 
outsourcing squanders precious time and 
resources, says Bart Perkins. You’re better 
off investing in a sound project to bring the 


embrace risk and reap the rewards. Page 34 





AST NOVEMBER, after a deluge of 
customer complaints about un- 
intelligible English, lengthy 
telephone waits and poor 
service, Dell Inc. rerouted tech- 
nical support for its U.S. corporate 
clients from a call center in India to fa- 
cilities in Texas, Idaho and Tennessee. 

Weeks later, Lehman Brothers Inc. 
followed suit, shifting offshore help 
desk support for the financial firm’s 
internal users back to the U.S. 

Another company, Fremont, Calif.- 
based Everdream Corp., pulled the 
plug on its offshore help desk center in 
Costa Rica in April. The reason: plum- 
meting customer satisfaction. 

Elsewhere, a decision by the Wash- 


How to combat offshore outsourcing backlash. 


ington State Health Care Authority to 
use offshore labor for a major IT con- 
tract prompted legislation that would 


| effectively bar state agencies from fu- 


ture use of offshore contractors. 
For CIOs, offshore outsourcing used 
to be a pretty straightforward dollars- 


| and-cents decision — a relatively mod- 


est financial investment in cheap for- 
eign labor in return for significantly 
lower ongoing operational costs. 

Not anymore. Backlash from em- 
ployees and customers has triggered 
productivity and revenue losses, plus 
more than a few public relations night- 
mares and political donnybrooks. 

Clearly, U.S. companies are in the 
hot seat when it comes to offshore out- 


hypergrowth or to help break down silos. Page 35 


failed organization back to life. Page 38 
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sourcing. But despite the backlash, in- 
cluding the ongoing public outcry over 
lost U.S. jobs and the heated rhetoric 
of politicians in a presidential election 
year, most businesses have no inten- 
tion of scaling back or delaying their 


| offshore plans. Indeed, 86% of 96 at- 


tendees polled at a Gartner Inc. out- 
sourcing conference in May said none 
of the backlash factors would cause 
them to change their offshore plans. 
The reason is pure and simple: eco- 
nomics. 
“Customers are constantly pursuing 


| cost benefits. It’s a constant, like gravi- 


ty,” says Mike Hoyt, CEO of Paradigm 
Works Inc., a chip design company in 
Andover, Mass., that sends design and 





IT work to India. “To outsource off- 

shore is not a political decision on the 
part of the company. It’s an economic 
decision with political ramifications.” 


Political Problems 

But those ramifications are consider- 
able, and mounting backlash from em- 
ployees, corporate partners and con- 
sumers substantially increases the 
risks involved in offshore outsourcing, 
says Alfred Ricci, who heads the newly 
launched sourcing management office 
at Union Bank of California (UBOC) in 
Los Angeles. A technical decision to 
move work offshore could “absolutely” 
trigger enough of a backlash to affect a 
company’s stock price, Ricci says. 
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As an example, he mentions Califor- 
nia Senate Bill 1386 [QuickLink 47344], 
which requires a company to inform 
customers if their privacy may have 
been compromised. “A violation of that 
law [by an offshore outsourcer] would 
have a tidal-wave effect, which could 
result in a downgrading of the bank’s 
creditworthiness,” he notes. 

To mitigate that risk and minimize 
damage, the UBOC created a dedicated 
sourcing office, which reports to an ex- 
ecutive vice president and handles not 
only all contracts for professional ser- 
vices and staff augmentation, but also 
all strategy and communications re- 
garding offshore plans. 


Internal Issues 

Two of the thorniest backlash prob- 
lems around offshore outsourcing are 
rumors and employee flight, Ricci says. 
“The first reduces productivity, and 
with the second, the bank loses skills 
and knowledge,” he notes. The sourc- 


| change program” offers other benefits, 
| says Chief Technology Officer Chetan 


Shah. “It helps people gain experience 


| and understand why this global model 


| 
| 


is so important. They also gain respect 


| for their foreign counterparts. 


“You need to be honest with em- 


| ployees,” explain the economics of the 


situation and offer them the right to re- 


| turn when jobs become available in the 
| U.S. again, Shah adds. 


But choosing which IT employees 
should remain after sending work off- 


| shore can be tricky, warns Gartner ana- 


lyst Linda Cohen. 
“Not all people are going to make 
the transition to higher-level positions 


| here as the commodity work is moved 


ing office helps prevent both problems. | 


It assists senior management in 
preparing presentations to line em- 
ployees about the effect outsourcing 
will have on them. It also provides 
managers with a list of answers to fre- 
quently asked questions so all informa- 
tion is consistent. Moreover, the bank 
has a person dedicated to tracking leg- 
islation and regulatory updates that 
could affect how and where the com- 
pany outsources IT work. 

Ricci emphasizes that the cost of run- 
ning the sourcing office is “100% over- 
head. But the way you mitigate some of 
the risks associated with outsourcing is 
to plow some of the cost savings back 
into the monitoring and management 
of the [outsourcing] relationship.” That 
includes managing employees and cus- 
tomers. “Basicaily, the cost savings is 
50%. You take 25% of that and put it in 
legal, contracts, extra management. 
You can’t be greedy,” Ricci says. 

Synygy Inc., a software and services 
company in Conshohocken, Pa., that 
has development centers in Pune, In- 
dia, and Iasi, Romania, is hoping to 
minimize employee backlash. It offers 
U.S. employees who might otherwise 
be laid off the choice of working at one 
of those centers at a salary equivalent 
to what local IT employees earn, which 
is 30% to 70% less than in the U.S. 

In addition to cost savings, the “ex- 


offshore,” she says, adding that CIOs 
often choose the wrong people to stay. 
“Typically, they choose the guys who 
stuck with them and stayed up all night 
to fix broken code. They usually pick 
people who do the very things they’re 
choosing to outsource.” 

The solution, Cohen says, is to pro- 


| file all IT employees, flagging as keep- 


ers “those with consultative skills who 


| aren’t wedded to how work is done but 


instead are wedded to the outcome.” 
CIOs should also be forewarned that 


| IT workers aren’t the only potential 


source of employee backlash. Business 


| managers and workers in other depart- 
| ments are often resistant to change, 

; says Kaushik Bhaumik, vice president 

| of business technology consulting at 


| 


INI 


NATIONAL 





offshore outsourcing vendor Cog- 
nizant Technology Solutions Corp. in 
Teaneck, NJ. 

“Each one of those organizations has 
gotten used to working with IT ina 


Beet clas 
181% of 

gett es 
say they’re concerned 
about legislation and politi- 
er BC ecm ULL et| 8] 
prevent U.S. organizations 
from moving jobs offshore. 
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62% of buyers 
and 72% of 
providers 

RUM CRRO LCC 
about negative corpo- 
rate publicity about 
moving jobs offshore. 


certain way, and they may be used to 
Tom or Mary from IT. So you need to 
identify those users’ key concerns, and 
it may mean keeping Tom or Mary 
where they are and developing a role 
around them,” he says. 

Bhaumik also recommends choosing 
“change leaders” to remain on board as 
employees. “Change leaders speak up 
at meetings and command respect from 
peers, regardless of their titles,” he says. 
“People listen more and espouse change 
when they hear it from their peers.” 


| Lay Out Plans 


Counseling corporate customers about 
how to prevent or deal with worker 
and customer backlash to offshore out- 
sourcing is a growing part of a consul- 
tancy’s work, Bhaumik says. The most 
important advice he gives clients is to 
have what he calls an offshore road map. 
“One of the most painful aspects of 
[offshore outsourcing] is when it 


| comes out in dribs and drabs,” he says. 
| “It can be very disconcerting to peo- 

| ple. It just stops work.” Bhaumik advis- 
| es clients who are offshoring more 


than 25 jobs to lay out what they are 


| doing in three, six, nine and 12 months. 
| “People respond better to a long-term 


road map and their place on it, rather 


| than a road map that appears to be 


thought up on the fly,” he says. 
Regardless of the extent of work 


| to be sent offshore, the absolute cor- 
| nerstone of all backlash-control strate- 
| gies has to be factual information, 


experts Say. 

“You don’t want rumor to overtake 
reality,” says Michael Treacy, author of 
several management books and co- 
founder of Gen3 Partners Inc., an In- 
ternet and offshore outsourcing con- 
sulting firm in Boston. “In the end, you 
can only politicize so long, and then 
the facts will prevail.” 

According to Treacy, the “hysteria” 
that surrounds offshore outsourcing 
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say they’re concerned 
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ee backlash. 
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value, not internal cost savings. 


| doesn’t reflect reality. He says the 


highest prediction of the number of 
jobs lost to offshore outsourcing is 


| 300,000, yet the U.S. economy has 130 


million jobs. “That means offshore out- 
sourcing accounts for one quarter of 
1% of the American economy,” he says. 


Customer Concerns 

In dealing with customers, Treacy ad- 
vises CIOs and other executives to al- 
ways explain their decision to go off- 


shore in terms of the value it brings to 


the customer. “Customers fundamen- 
tally don’t care what you’re doing with 
your employees,” he says. “That’s why 
every communication to customers 
must be couched in such a way that 
you're providing better value to them. 

The best way to control damage, of 
course, is not to outsource offshore. 
That’s the strategy at DSLExtreme, a 
Canoga Park, Calif.-based cable com- 
munications and Internet service 
provider with 50,000 subscribers. The 
company tries to offset its higher labor 
costs by touting itself as a hometown 
player — “a local company with a local 
feel,” says CEO Ari Ramezani. 

The downside, Ramezani says, is the 
unavoidable fact that consumers have 
to be willing to pay more for services 
from companies that don’t outsource 


overseas. @ 47609 


AVOIDING MISTAKES 


Learn 10 communications mistakes companies 
commonly make when they move IT functions offshore: 


QuickLink 47612 


Off to India: One Synygy employee relates her 
experience moving offshore with her job: 


Qe QuickLink 47611 
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Managing 
‘Real’ Risks 


‘Tom DeMarco says knowing how 
to manage project risks enables 
companies to take bigger ones. 


To get big payoffs, you 

need to take big risks, 
1 says Cutter Consortium 

analyst Tom DeMarco. In 
his most recent book, Waltzing With 
Bears, he and co-author Timothy Lister 
explain how project managers can help 
their businesses embrace risk and reap 
the rewards. He told Kathleen Mely- 
muka why risk management is an idea 
whose time has finally come. 


You and Tim Lister have written about many 
topics over the years. Why risk management 
now? We have moved from a focus on 
risk control to a focus on risk-taking. 
When you're trying to enable people to 
take risks, then you really need to use a 
much more disciplined approach that 
allows you to assess and track the risk. 
It sounds paradoxical, but it’s the 
change in mind-set from, “Make this 


go away” to “Make it possible for me to | 


take some really big risks without bet- 


ting the farm on them.” All the systems | 


that are changing the world are very 
risky systems, but the payback is enor- 


mous. So we need much more method- 


ical ways to take risks. 


You call risk management “adult project 
management.” Why? Children are al- 


lowed to maintain a blasé presumption | 


that there is nothing bad in the world. 
Adults worry about the bad things that 
can happen. In pushing aside any con- 
sideration of failure, the can-do man- 
agement philosophy is intrinsically 
childlike. We need to move past that. 
Can-do is a recipe for being able to 
take only small risks. 


What are some of the benefits of good risk 


| sible. It doesn’t oblige you to abandon 
| your stretch goal; it only causes you to 
| consider your fallback plans for if that 


| more healthy relationship between 





management? It makes risk-taking pos- 





goal is not reached. It builds a much 


builder and buyer, in which people are 


able to talk maturely about uncertainty 


instead of pretending they’re certain 


when they haven't got a clue. It’s a way 


to scrub out the little white lies that 
are so much a part of the builder/ 
buyer relationship. 


What's the hardest thing about managing 
risk in an IT project? Risk is an abstrac- 
tion: something that may or may not 
happen. We are not used to dealing 
with abstractions on project plans. 
Every activity on a project plan has to 
be done. Any that might have to be 
done are not on the plan. The whole 


| notion of uncertainty is hard to wrap 


your mind around. It’s anti-intuitive 
and also countercultural in some 
places. There are some places where 


| you can be wrong but you're not al- 


lowed to be uncertain. 


Risk management seems so obvious. Why 


| are IT groups so averse to it? There’s a 
presumption built into the heart of IT 


project planning that starting a project 
off toward unrealistic goals does no 
harm. But if you’ve been through a 


| project that was done that way, you 


BONER CORUM uy mo Clee ec) 
risk-taking in their book Waltzing With Bears. 


know it does terrible harm. It causes 
you to do things in the wrong order 
and leave out things that need to be 
done. But still, we figure out the most 
optimistic possible scenario and plan 
according to that. 


Are IT people ready to do real risk manage- 
ment? There is a class of person who is 
reluctant to open this book. They know 
it will tell them about managing uncer- 
tainty in a reasonable way, and a lot of 
people don’t want to hear that. It’s like 
| going for a colonoscopy. You know it’s 
good for you, but you keep putting it 
off because you don’t want to face the 


| possibility of bad news. @ 47618 





THE ONUS OF UNCERTAINTY 


CORPORATE CULTURE - whatever 
that means - poses serious challenges 
to the would-be risk manager. The most 
important of these is an attitude toward 
uncertainty, summed up as follows: It’s 
OK to be wrong, but not OK to be uncer- 


tain. If that rule describes your company, 


you're sunk. 

The rule says you may miss your 
promised delivery date, but in the 
months and days leading up to that 
date, you're not allowed to express any 
doubt that you will indeed deliver on 
time. Failure is tolerated as long as you 
don't commit the capital crime of admit- 
ting beforehand that you might fail. 

This constraint may leave you prone 
to an infectious disorder called selective 
myopia. Projects that are stricken with 
this condition can see only small prob- 
lems. Large problems may loom directly 
ahead - problems that would be in the 
center of any healthy project's field of 
vision - but they go completely unseen. 

People take elaborate care not to 
trip over the railroad ties, but nobody 
can see the oncoming train. Risks are 
identified, a risk list is published, risks 
are reported on status reports, and 


mitigation strategies are approved. 
Risks are monitored and tracked. If one 
only reviews the risk lists and records, 

it appears that the project is low-risk. 

All the risks enumerated are at the in- 
convenience or nuisance level. The risk- 
tracking proceeds without variance until 
the project is suddenly canceled, often 
followed by a furious bone-picking of 
the corpse by litigation. 


Waltzing 
Tatts) Be ne es 
« 


Fortunately, there's a vaccine. At 
the first go-round of risk identification, 
vaccinate everyone by naming all the 
catastrophic outcomes you can imag- 
ine. Ask for more catastrophes from 
the group. Speak the words failure, re- 
jection and cancellation. See whether 
you can get others to speak them 
publicly as well. Now, work backward 
from your catastrophe list, asking for 
scenarios that could lead to each of the 
catastrophes. Take each scenario and 
try to describe the risk(s) that could 
bring it about. Now you have the begin- 
nings of a risk list that might reflect 
future reality. 

The essence of the technique is this: 
Attack your nightmares, not your petty 
worries; to discover the risks that really 
matter to your project, trace backward 
from effect to cause. Watch for oncom- 
ing trains. 


“Adapted from Waltzing With 


ears, pp. 42-45, by permission 


© of Dorset House Publishing Co. 


Copyright 2003 by Tom De- 
Marco and Timothy Lister. 
All rights reserved. 
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Companies need different 
types of innovation sup- 
port from IT, depending 
on what stage they're in. 
memes New ideas come in 
many forms, from the 


disruptive innovation of 
the first PCs to the busi- 


ness model innovation of 


Dell’s decision to bypass 
the retail channel and 
sell directly to con- 
sumers. In the July issue 


of Harvard Business Re- | 


view, Geoffrey A. Moore 

says the way to get more 
bang for your innovation buck is to look 
at how any market evolves throughout 
its life cycle and tie your innovation ef- 
forts to that evolution. Moore, a manag- 
ing director of TCG Advisors LLC in San 
Mateo, Calif., told Computerworld’s 
Kathleen Melymuka that the challenge 


for IT is to support those evolving efforts | 


with appropriate technology. 


Looking at innovation as an evolution is fas- 
cinating. What role does IT play in all this? 
IT is an enabler of each of these kinds 
of innovation. With disruptive and ap- 
plication innovation, the technologies 
that matter most are about communi- 
cation and collaboration. People have 
been talking about concurrent engi- 


neering and collaboration problems for | 


20 years, but our clients say communi- 
cation and collaboration are still not 
what they want them to be. IT has a 
long way to go to be better at those. 


In product and process innovation, things 
heat up. How does the IT role change? With 
product and process innovation, where 
companies are ramping up and seeing 
hypergrowth, laying down the trans- 
actional systems really matters, and 


sana? 


ag 
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How can IT avoid the siloing? During this 
hypergrowth phase you’re growing so 
fast you may want to talk across func- 


| tions, but there’s no time to talk to any- 


one. Companies and IT tend to build 
those silos that they spend the rest of 


| their lives trying to deconstruct, but 
| there’s no easy way around it. That’s 
the classic IT of the go-go years. 


What happens after that? We’re not in hy- 
pergrowth but not in decline. We’re in 


| that indefinitely elastic middle where 


IT can be a genuine source of differen- 
tiation. You’re taking the costs out of 
processes, and there’s a lot IT can do. 
In particular, you’re trying to extract 
resources out of nondifferentiating 
processes so you can concentrate on 


the differentiating ones. Outsourcing 
| some of the functions of the corpora- 
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tion can be very important here. 


How does IT support that? Whenever you 
outsource, you need great visibility and 
control systems. IT has fallen behind 
here. IT systems tend to be about pro- 
ductivity for in-house workers. When 
we do the work, we’re not so worried 
about visibility and control because 
management takes care of that. But 
now [with outsourcing] it’s about visi- 
bility and control at a distance. It’s 
really important to put in place service- 
level agreements around outsourced 
functions that keep everyone apprised. 
Process control knowledge is typically 
built into the chemical and oil indus- 
tries, but average companies don’t know 
squat about it. Sure, we have Six Sigma 
black belts running all over companies, 
but IT needs to develop software to take 
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their place. That's still in the works. 


What happens as the market declines? As 
the curve starts to decline and you 
come to business model innovation, 
the old transaction systems will need 
to be reworked. That’s going to disrupt 
the heck out of IT, and I don’t have an 
easy answer. You may be eliminating 
members of the value chain. Maybe 
you no longer need four companies; 
maybe you can make do with two or 
one. When you do that, IT systems be- 
come ground zero. Look at how Dell 
disintermediated the retail channels. 
They did it with IT. So value chain in- 
novation is a big deal. 


And at the end of the line? Structural inno- 
vation is all about merging companies 
and merging IT. There must be a place 
in purgatory where that’s all you do, 
because nobody likes the outcome and 
everybody hates you for years. That’s 

a place where IT is really challenged. 
If you have an enemy, this is a great 
assignment for him. @ 47712 

This is the latest in a series of monthly discus- 
sions with authors 
on topics of interest to IT managers. 


To succeed at innovation, Geoffrey A. Moore says, a company needs to calibrate 
its efforts to the life cycle of the market it’s in. Here’s how it works: 


Early: Technology is introduced 
to early adopters and visionaries. 


Niche: Technology is gaining acceptance among prag- 
matists in a niche market where it solves a problem. 


Adoption: Technology is perceived as 
necessary and standard for many applications. 
Revenue soars; competition heats up. 


Early mainstreara: Hypergrowth subsides but 
growth continues. Market share stabilizes. Cus- 
tomers expect and reward systematic improvements. 


Mature: Growth flattens; commoditization 
increases. Customers take product for granted, 
but no threatening technologies are on the horizon. 


Declining: Product category has become ossified 
and unresponsive to customer needs. Customers 


designing for scalability is a huge 
issue. You don’t need IT to help you 
differentiate; you need IT to keep the 
wheels on the car, and it’s vibrating 
madly. During this period, IT has its 
hair on fire. It gets very focused and 
even a bit siloed because at this point 
the functions in the company that it 
serves tend to be siloed. 


seek relief, and threatening new technologies 
are beginning to appear. The market is ripe 
for some form of disruption, whether through a 
new technology that will render this one obso- 
lete or a radically innovative business mode!. 
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WHAT EMPLOYERS WANT 


During an IT job interview, 
focus on the following: 
AER CUS cUE RC Ctne 
project or product 


= How you handled a special 
assignment outside of your 
official job. 

® How you identified and 


solved problems that had 
been previously overlooked 


AER eves tle 
Coen ea LONI 


Sleepless In. . . 


® BRITAIN: One out of three IT 
directors is working between 
48 and 60 hours a week. 


@ FRANCE: 3% of IT directors 
are working more than 60 
hours a week. 


@ GERMANY: 2% of IT direc- 
tors put in the equivalent of 
7.5 working days a week. 


SOURCE: 2004 RESEARCH CONDUCTED 
JOINTLY BY MERCURY INTERACTIVE CORP. 
AND THE MANCHESTER BUSINESS SCHOOL 


What’s on Your Nightstand? 


FORMER PRESIDENT BILL CLINTON’s new autobiography, My Life, is 
this summer's must-read for executives, according to a June survey of 
business and IT executives conducted by the Association of Executive 
Search Consultants in New York. Of 174 executives polled, 36% 

said they would be reading Clinton’s book this summer. 


® Other top tities include Alexander Hamilton, by Ron Chernow; Trump: 
How To Get Rich, by Donald Trump with Meredith Mclver; Can You Keep a 
Secret?, by Sophie Kinsella; and Automatic Millionaire, by David Bach. 
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Can you make 

me money? 
Can you save me money? Can 
NOUR Hes MU Alta ig 
Bisco cm MN germ ULL 
today’s employers are interest- 
ed in when it comes to hiring IT 
a) Cy ir Lcmes tec Ve Uelg 
and longtime IT recruiter David 
Perry in his new book, Career 
CTT (em (ome aed Al 
sional: Where the Jobs Are Now 
And How to Land Them (Career 
Press Inc., 2004). 


Making yourself relevant to an employer's 
needs is what will get you noticed and hired, 
Perry says. IT job candidates need to think 
about their own accomplishments with their 
potential employer's requirements in mind. 
“As a job seeker, you need to become adept 
at direct self-promotion to executives and 
to showcase your answer to this question: 
‘How can | increase shareholder value?’ ” he 
writes. Perry recently spoke with Computer- 
world's Julia King about the challenges of 
finding an IT job today 


What’s your advice to IT workers who 
have been laid off or whose jobs have 


The U.S. House Appropriations Committee 


has voted to withhold $5 million from the bud- 


gets of the departments of Commerce, Jus- 
tice and State until the federal agencies can 
prove that all eligible workers are permitted to 


www.computerworld.com 


been outsourced? How should they be 
selling themselves in today’s IT job 
market? It's about taking charge of your 
career and your life. If you've been in the 
high-tech industry for the past 15 years or 
so, up until 2001, there was always some- 
body like me on every corner saying, “Hey, 
do you want a job?” We have a whole gener- 
ation of people who don’t know how to go 
and ferret out their own opportunities. You 
need to start by figuring out what skill sets 
you have that employers are most likely to 
pay for, what industries you're interested in 
and then do a Google search. By doing a 
Google search by job title, industry, area 
code, geographic location, etc., you'll get to 
80% of the job opportunities out there. Go- 
ing through IT job boards, you'll maybe get 
to 2% of the opportunities out there. 


And then what? Figure out who the peo- 
ple are with the responsibility for actually hir- 
ing you. Find something intelligent to say to 
these people, and then go after them in a di- 
rect manner. Typically, it's a VP. Do a search 
for quotes from them in business articles or 
find any white papers they've written and 
read them. Find the person's e-mail address 
and send them a note saying you read their 
white paper and get a discussion going. All 
of a sudden, you're no longer looking for a 
job, but you're having a business discussion. 
For so many people looking for an IT job, 
that is so far out of the realm of what they've 
been taught to do. 


What are the top three mistakes you 
see IT job candidates make today? 
Sending their résumé to personnel. Sending 
their résumé to personnel and sending their 
résumé to personnel. €¥ 47820 


telecommute. The 2005 appropriations bill 
also requires the federal judiciary, the Small 
Business Administration and the Securities 
and Exchange Commission to prove that eligi- 
ble employees are permitted to telecommute. 


a% With all of the advances in technology today, 
there’s just no reason to strap yourself into a 
metal box every morning just to drive to an office 
where you sit in front of a computer all day. Off- 
the-shelf technology even allows for face-to-face 
meetings via videoconferencing. So not being able 
to talk - or see - co-workers on a regular basis is 


no longer an issue. 


REP. FRANK WOLF (R-VA), CHAIRMAN, COMMERCE-JUSTICE-STATE APPROPRIATIONS SUBCOMMITTEE 





Got Questions About 
Network Consolidation? 


Computerworld’s IT Executive Summit Has the Answers 


If you're an IT executive* in an end-user Streamlining Networks and Data Centers: 


organization, apply to attend Computerworld's | The Business Benefits of Consolidation 
upcoming complimentary half-day summit viet rc ae ANA 
San Franc e @) 


on N y wJCii inciSCO ® August J CI & 


ClOs and senior IT executives are finding that 

consolidating high-performance networks can 

play a key role in improving business applica- | 

tion performance while significantly reducing | 815amto 8:45am Rebuilding the IT Foundation 
operational costs. Maryfran Johnson, Editor in Chief, Cor 


The proliferation of network capacity and relat- | 8:45am to 9:15ar Consolidation and the Data Center: 


ed storage and server infrastructure presents a Boosting Business Performance 
i and Application Availability 


daunting challenge for today’s enterprises, hs taut tected 
many of which are positioning themselves for | Seaver Siclition Research Director, 
growth yet still seeking to reduce IT costs x 
where feasible. t 45am Perspectives from a CIO 


By leveraging the knowledge of industry 9:45am to 10:15am Refreshment and Networking Br 

experts and the real-world experience and . 

advice of your IT peers, this IT Executive 10:15am to 10:45am —_ User Case Study ae 

Summit will provide an overview of effective | arr Serve Adolph 
strategies for consolidating and connecting CTO, Enterprise 


networks and data center applications. 1 am to 11:15am Customer Challenges and Solutions: perengg — 
Real-Life Scenarios Connecting Data we 
*Complimentary registration is restricted to Centers Over Distance 
qualified IT executives only. Steve Adoipt TO. Enterprise S 


“ : : 5 O Panel: Overcoming Management Barriers — 
Apply for registration today Making the Case for Consolidation 
For more information or to apply, visit “ane heodierater: Mesyieen Johneon, Cettor in Chiet 


ww.itexecutive 


Joe Puglisi 
clo, 
EMCOR 


Noon 


This program will also take place in: Chicago 


Exclusively sponsored by 


COMPUTERWORLD 


IT EXECUTIVE SUMMIT 
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Capgemini Targets 
Energy Sector 


Capgemini Energy LP, a collabo- 
rative venture of Capgemini 
America Inc. and TXU Corp. and 
its subsidiaries, began operations 
in Dallas as part of a 10-year deal 
to provide IT, call center and 
business services initially to TXU 
and, later, to otherenergycom- | 
panies. Bob Pryor, whe previously | 
served for four years as North 
American president of outsourc- 

ing services at Capgemini, will 
serve as CEO. Elizabeth Lavalley, 
who most recently served as 
Dallas-based TXU’s senior vice 
president of IT, will join the limit- 
ed partnership as chief operating 
officer. 


CSC, Cinergy Sign 
IT Services Deal 


Computer Sciences Corp. an- 
nounced that it has signed a five- | 
year, $71 million IT application 
services agreement with Cinergy 
Services Inc., the administrative | 
arm of Cinergy Corp., a Cincin- 
nati-based power provider. El 
Segundo, Calif.-based CSC will 
provide application development 
and support for noncore func- 
tions. Cinergy will retain applica- 
tion work related to mission-criti- 
cal company programs. CSC has 
conducted project work for Ciner- | 
gy for 15 yearsinareassuchas | 
application development, systems | 
integration and supply chain 
management. | 


ClO, CTO Quit Citrix. 


Fort Lauderdale, Fla.-based Citrix | 
Systems Inc. announced that | 
Jeanne M. Moreno, senior vice 
president of corporate services 

and ClO, and Bob Kruger, senior 
vice president of product develop- | 
ment and chief technology officer, | 
have decided to leave the compa- 
ny. Citrix also announced that it 

will reorganize the corporate ser- 
vices unit, including IT, facilities, 
purchasing and manufacturing. 

The unit will be integrated into 

the finance and administration 
organization under Chief Finan- 

cial Officer David Henshall. 


MANAGEMENT 
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www.computerworld.com 


Rkegeneratin 


ANY COMPANIES feel that their IT or- 
ganizations are “broken” or irrepara- 
bly damaged, and indeed, some are. 
The symptoms of a damaged IT orga- 
nization are all too familiar: failed 
projects, big write-offs, high CIO turnover, an outdated 
technology base and uninvolved executives telling the 
latest CIO, “Call me when the problems are fixed.” 
These companies are often tempted to succumb to the 
siren song of the outsourcers who offer to take over all 


of IT and promise to fix it. 
However, companies that Ke; 
expect to leverage an out- 
sourcer’s expertise in this 
manner usually find that 
their costs increase dra- 
matically. In addition, the 
outsourcer often requires 
numerous changes to cor- 
porate business processes, 
some of which may be un- 
acceptable. 
When an IT organization 
is badly damaged, out- 
sourcing the whole thing is 
truly tempting, but such a 
desire often means “Let’s 
abdicate all responsibility 
for IT.” Such endeavors can 
be classified as “despera- 
tion outsourcing” and 
rarely succeed. Outsourcing IT can be 
successful, but not when the organiza- 
tion is damaged. Fix the problems 
first, then revisit outsourcing options. 
Like the damaged arm of a starfish, 
the failed IT organization needs to be 
regenerated, not amputated. Success- 
ful regeneration efforts require a 
strong CIO who will say “no” loudly 
and clearly when needed, even if it 
makes powerful executives unhappy. 
Regeneration efforts aren’t a popu- 
larity contest. The leadership role is 
generally best performed by an OOTA 
(out of town agitator), a specialist 
from outside the corporation. The 
OOTA is hired as CIO to focus solely 





on successful regeneration, 
which usually takes two to 
three years. When the re- 
generation is complete, IT 
will be turned over to a new 
CIO whose skills are better 
suited to running a stable 
organization. Make sure to 
wait until completion to 
make this turnover; the two 
CIOs aren’t interchange- 
able, since they have widely 
different skill sets. Switch- 
ing too soon can undo 
everything that’s been ac- 
complished to date without 
reaping the full benefits of 
the regeneration effort. 
Yes, the right OOTA can 
be expensive, but not as ex- 
pensive as outsourcing your whole IT 
organization, and certainly not as ex- 
pensive as outsourcing IT, failing and 
then having to bring it back in-house. 
A firm foundation for successful re- 
generation also includes the following 
requirements: 
@ Executive buy-in. IT isn’t a spectator 


| sport. The other CxOs need to actively 


support the regeneration effort. Most 
new IT systems require changes to the 
underlying business processes, partic- 
ularly when replacing outdated sys- 
tems. Midlevel managers who prefer 
the status quo must not be allowed to 
withhold their cooperation or ignore 
or undermine the efforts of the re- 





generation team. 
® Sufficient time. Problems that took 
many years to develop require sub- 


| stantial time to correct — usually mea- 


sured in years, not months. Unfortu- 
nately, there are no silver bullets. 

@ The right team. Regeneration isn’t 
sexy, but don’t be tempted to put a sec- 
ond-level team on it. Regeneration re- 
quires a talented, focused and dedicat- 
ed team, and prior regeneration expe- 
rience is invaluable. While the team 
may find it helpful to supplement ex- 
isting staff with experienced consul- 
tants, the internal members must be 
held responsible for the final results. 

® Stability. Make any needed staffing 


| changes at the start. Changing leader- 


ship or key employees midstream will 


| almost certainly derail the effort. 


@ Focus and execution. Start regenera- 


tion with a clear, well-thought-out 


plan. Then focus ruthlessly on deliver- 


| ing against that plan. When an IT or- 


ganization hasn't delivered for several 


years, there is inevitably pent-up de- 


mand for IT services. When the rest of 
the corporation realizes that the IT or- 


| ganization may be productive again, 
| demand will be enormous. But the 


CIO must delay most new projects un- 
til regeneration nears completion. Un- 
dertaking unanticipated projects can 
severely hamper regeneration success. 

Although it’s tempting to believe 
that outsourcing a broken IT organiza- 
tion will magically fix it, this “out of 
sight, out of mind” approach usually 
spells disaster. When your IT organi- 
zation is damaged, don’t succumb to 
desperation outsourcing. Instead, take 
your cue from the starfish at the bot- 
tom of the ocean to make sure your IT 
organization doesn’t end up at the bot- 
tom of the Dumpster. @ 47773 


MORE ONLINE 


IT Turnarounds: |s your IT shop chaotic, unfocused or 





| demoralized? Here's a road map for fixing such problems: 


For more columns and links to our archives, go to 
© www.computerworld.com 
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he leaders of the nation’s top computer science/software engineering 

degree programs agree on two things about preparing the IT workforce 
of the future. First, they need to attract more people to the technical 
professions. Second, the breadth and dexterity of what is covered in 
lifelong learning continues to grow. 


U.S. News & World Report rated Rose-Hultman Institute of Technology, Cal- 
Poly (San Luis Obispo) and The Cooper Union as the top three institutions 
for undergraduate computer engineering. 


Dr. George Campbell, president of The Cooper Union for Advancement of 

Science and Art in New York City, looks at the issue of technology 

education from two perspectives — in his current role as an academic 

leader and his previous role as CEO of NACME, a non-profit devoted to 

science and technology education and policy. “The most significant 

deficiency we have been unable to overcome is under-representation of 

women and minorities” in technical studies, Campbell says. “In the past we have filled the 
workforce needs by bringing technology workers into this country. This is no longer 
working. Other countries are investing a greater proportion of their gross national product 
in the education of their own technical workforce.” 


Cooper Union's situation is highly unique; the institution has 1,000 students, 100% of 
whom are on full tuition scholarships. Approximately 32% of the students are female. The 
number is higher than the nationwide average of women in technology (23%). However, 
the number of African-Americans, Latinos and American Indians enrolled in technology 
courses nationwide remains in low double-digit figures. Campbell believes change will 
occur only through intervention at earlier ages to attract children from inner city schools. 


While demographics and numbers are critical, given that the vast majority of higher paying 
jobs is in the technology areas, so too is the breadth of studies undertaken. According to 
Campbell, “Most of the technology advances that took place in the 20th 
century resulted from major breakthroughs in physical sciences — quantum mechanics, solid 
state physics, chemistry and so on,” Campbell explains. “In the future, more advances in 


DATABASE ADMINIS- IT PROFESSIONALS 


TRATOR: sought by IT 
co. in Houston, TX 
Must have degree & 
exp 


Senior Consultant 


Glen Mills, PA and other locations throughout the United 

team of Siebel customization developers in a Siebel Appt 

ment environment, specifically with Siebel Actuate reportir 

for the creation of project pians, level of effort estimatio 

of the engagement, resource allocation and prioritization of 

members. Responsibie for liaising with business users 

mentation options for ri rting and presenting and review the design and 
prototypes of the proposed reporting solutions. Resp D- 
ng and ae of Operseon Ss requirements to 


Respond by 
resume only Eg: 
Pascual President 
T/B#10, Komputer + 
, 11750 
Houston, 


props for security contr of uti tilizing the “Actuat e 5 Papert! Server. 

Siebel enterprise applications such as Siebel Sales, Siebe' 

and Siebel service utilizing Siebel tools such as Siebel VB/e 

Oracle SQL capabilities for testing methods of data transfer and s' orage 
in the Siebel Database and for loading data via Siebel EiM for perfor- 
mance testing activities 


Peripherals, Inc 
Wilcrest Dr., 
TX 77099 


The wage offered is $82,000/year. The work schedule is Monday-Friday 
9:00am-5:00pm. The minimum requirements are as follows: Bz 

degree or equivalent in Computer Science, Engineering (any 
Administration, Information Systems or Mathematics plus 6 years experi- 
ence in the job offered or 6 years experience as a Manager, Senior 
Consultant, Consultant, Associate Consultant, 

Employer will regard a foreign degree to be equivalent 

Bachelor's degree as determined by an accredited credentials ev valuation 
service. Related experience must also include at least 2 
Actuate Reporting, Siebel! Application Development Environment 
Tools) and Oracle/SQL 


Siebel 


Please send your resume, referencing Job Order Number WEB 433177 
to the: PA CareerLink, FLC Unit, 235 W. Chelten Avenue, Philadelphia, PA 
19144. EOE 


BCC USA Inc 
Maine needs experienced Da- 
tabase Administrators having a 


BCC USA inc. - Portland, Portiand 
Maine needs experienced 


Programmer Analysts hav- 


>) 
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Puzzled? 


itcareers.com can solve the 
labyrinth of job hunting by 
matching the right IT skills 
with the right IT position 
Find out more at: 


www.itcareers.com 
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ing a Bachelors degree with 
minimum two years of pro- 
gressive work experience in 
Java, J2EE, EJB, JSP, 
Serviets, JavaScript, XML, 
XSL, MVC, Struts, Weblogic 
and Oracle. Competitive 
salary and benefits. M-F, 40 
hours/week. Please mail 
your resume to BCC USA 
Inc., HR Department, 650 
Main Street, Suite 201, 
South Portiand, ME 04106. 


Computerworld + InfoWorld 


Bachelors degree with mini- 
mum two years of progressive 
work experience in 
development and installation of 
databases using Oracle 
base Developer, Pro*C 

DBI, Unix, PL/SQL 
ca, Autosys and Erwin. Com- 
petitive salary and benefits. M- 
F, 40 hours/week. Please mail 
your resume to BCC USA inc 
HR Department, 650 Main 
Street, Suite 20 South 
Portland, ME 04106. 
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ation Programs Look to Future 


technology will be driven by breakthroughs and greater understanding of 
processes in life sciences—self replication, DNA and the like. | believe all 
engineering majors should have a course in molecular cell biology, just as 
physics and chemistry are required today.” 


In addition to major shifts in curriculum to include life sciences, Campbell 
says educational programs have to avoid the trap of relying on 
simulations alone to help teach. “You really need to understand the ideas 
to comprehend the technology that is behind it,” he says 


Dr. Cary Laxer, head of the software engineering/computer science 

program at Rose-Hultman Institute of Technology, says the breadth of 

capabilities required also must be addressed. Rose-Hultman already has 

added courses in critical areas — networking, computer security and 

cryptography. “We've added a required course in technical 

communications,” Laxer adds, “to make sure our graduates can 
communicate with a variety of constituencies.” Laxer and his peers at other U.S. universities 
continue to assess the longer term future of technology and adjust curricula accordingly. 
Adding courses is just one aspect of that change — professional development for faculty 
and equipment for students also has to be included. 


The third critical aspect of IT education is lifelong learning, say Campbell and Laxer. “This 
isn't just a technical issue,” stresses Campbell. “There needs to be a balance between 
liberal arts and technology learning throughout life. This is so important in understanding 
the context in which we do science and engineering — the ethics, societal implications and 
economic effects. These are the things that separate professionals and visionary leaders” 
from others, Campbell adds. 


For more information about IT Careers advertising, please contact: 
Nancy Percival, Vice President, Recruitment Advertising 
800.762.2977 

500 Old Connecticut Path, Framingham, MA 01701 

Produced by Carole R. Hedden 
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Compuware 
At Compuware, you can put 
your IT experience to work while 
constantly developing new skills 
We currently have the following 
nationwide opportunities. 
+ Business Analysts 
+ Database Administrators 
* Network Administrators 
+ Product Sales 
*P t Management/Support 
* Pre mmiers/Analysts 
* Project Managers 
+ QA Analysts 
* Software Developers. 


ngineers 
nical Writers 

* Web Developers 

+ Recruiting Manager 


www. compuware.com/careers 
Be sure to indicate the specific 
title and location you are apply- 
ng for on your application letter. 
Send your resume, referring to 
ad #1TC071204, to 

Compuware Corporation 
Attention: Recruiting 

One Campus Martius 

Detroit, Mi 48226. E-mail 
ads@compuware.com 

EOE 


Applied Optoelectronics, Inc 
(Sugar Land, TX) is seeking a 
Database Administrator using 
Oracie9i, SQL, SQL DTS, 
TransactSQL, Pervasive 7, VB 
PL/SQL, VMS, Linux, UNIX 
scripting, Tivoli, EMC environ- 
ment Erwin and UML 
Peoplesoft, SAP with Oracle 
DB2 and Sybase. B.S. 3 mon 
exp. Send resume to 13111 Jess 
Pirtle Bivd., Sugar Land, TX 
77478/281-295-1888 (F). Attn 
HR Manager. 
K.T.J. Imports and Exports, Inc 
Houston, TX) is seeking a MIS 
Engineer/MIS Specialist using 
knowledge in business, OSAS 
and SAP Data Warehouse soft- 
ware. B.S. 6 mon. exp. Send 
resume to 6500 Long Point Rd 
04, Houston, TX 77055/713. 
680-3124(F). Attn: Chyryi Shiau 
Canspec Amerasia Industries 
Inc. (Houston, TX) is seeking 
Systems Programmer. B.S. 1 yr. 
exp. using Microsoft.Net, ASP. 
VB.Net, Java, SQL, OLAP, XML 
GeoFrame HRS Jason 
Ergos99, isis, Sun Blade2000. 
Sun Ultra60, and SG! OCTANE 
Send resume to 8303 S.W. 
Fwy #488, Houston, TX 
77074/713-771-8868(F). Attn 
Eric 


Programmer Analysts to analyze 
design, develop and support co- 
mputer systems using OS like 
MVS/ESA, DOS/VSE, UNIX, MS 
-WINDOWS, databases such as 
DB2, VSAM and Oracle, progra- 
mming environments such as C. 
C++, COBOL, COBOL II, TSO- 
ISPF, CICS, JCL and tools in- 
cluding FILEAID, IDCAMS, SQL- 
"PLUS and PRO*C; generate 
batch reports from existing data 
and debug for better perfor- 
mance. Require BS or foreign 
equivalent in CS or any branch of; 
Engineering or related field with 
2 yrs exp in IT. High salary, fit 
position. Travel involved. Resu- 
mes to HR, Smartsoft interna- 
tional, Inc., 3965 Johns Creek 
Court, Suwanee, GA 30024 


IT SPECIALIST to plan, design 
implement, maintain and admin- 
ister the company's information 
infrastructure, including hard- 
ware setup and maintenance 
software installation, configura- 
tion and upgrades; network 
administration and troubleshoot- 
ing; implement, evaiuate and 
maintain networked computer 
hardware to meet user require- 
ment; design, develop and main- 
tain the company's website; pro- 
vide programming, design and 
technical support for users and 
clients. Require: Bachelor's de- 
gree in Computer Science/ 
information Systems. Competi- 
tive salary offered. Mail resume 
to: Chief Manager, Lalji invest- 
ors, LLC, 1351 Dogwood Dr., 
Conyers, GA 30012. 
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Partner Manager, Latin America 
identify + initiate business rela- 
tionships with Latin American 
third party vendors of software + 
database systems. Manage rela- 
tionships with Latin American 
vendors. Supervise Latin Ameri- 
can sales channels + marketing 
activities. Requires Bachelor's or 
Equiv. in Marketing or Business 
Admin., plus 4 years exp. in posi- 
tion offered or 4 years exp. as 
Marketing (Manager/Director) 
Computer Software. Requires 
frequent travel to Latin America 
4 years experience with Software 
sales + marketing in Latin Ameri- 
can markets; Fluency (spoken + 
written) in Portuguese + Spanish 
languages. Salary $90,000 per 
year; Hours: 8:00 a.m. - 5:00 
p.m., 40 hours, Monday-Friday, 
Job located in Miami, FL. Send 
resume to: Workforce Program 
Support, P.O. Box 10869 
Tallahassee, FL 32302-0869 
Ref: JOFL# 2533090. 


Sys Analyst to d/zn, dev, impl. & 
maintain web enabled eComm, 
client-server & N-tier appis. Per- 
form sys req study, sys analysis. 
Test Pian Preparn, Unit Testing, 
Sys Integrn Testing & Doc. Dev 
appl using Java, Serviet, JSP, 
J2EE, EJB, HTML, DHTML, VB- 
Script, JavaScript, ASP, VB6.0, 
COM/DCOM, VC++, 1IS4.0. 
Weblogic 5.1/6.0, SQLServer 
6.0, Visual Cafe 3.0, Visual 
Interdev 6.0, VSS 6.0, Solaris 7 
WebSphere App! Server 4.x/5.x. 
MQSeries, DB2 7.3/8.1, AIX 3.4, 
Win 2000, SOAP 1.1, ANT, 
JUnit, Websphere Studio Appl 
Developer 4.x/5.x, JProbe. 
PVCS, Versata Logic Ste 5.5 & 
respon for lifecycle of s/w projs. 
24X7 tech supp. BS in CE + 2 yr 
exp. Certified Java programmer 
Comp. salary. Apply to Unilinx - 
Code RB, 4625 Alexander Dr. 
#110, Alpharetta, GA 30022 with 
proof of perm. W/k authzn. 


Infobahn Technologies deliv- 
ers innovative IT Solutions 
to business clients nation- 
wide. We have immediate 
full time opportunities for 
Programmer Analysts. All 
applicants must have a min- 
imum BS in Computer 
Science Engineering or Re- 
lated field plus 2 years of 
experience. Send resumes 
to: Infobahn Technologies, 
(HR) 288 Walnut St. #410 
Newton, MA 02460 


Manager, IT. (Rockleigh, 
NJ). Reqs 4 yrs exp IT 
management, incl secure 
databases & MBA or MPA 
w/undergrad Comp Sci, 
Math, or Elec Engineering 
major. Will also accept 4 
yrs exp & MBA wiIT core 
Send resume: US Tender, 
8 King Rd, Rockleigh, NJ 
07647 Attn: HR/IT. 


MPHASIS CORPORATION 
Has multiple openings for the’ 
following positions at its offices 
in New York, NY, Memphis, TN. 
Houston, TX, San Mateo, CA 
and unanticipated client sites 
throughout the U.S 
rammer Analyst 
Engineer, Project Manager, 
Management Analyst, Sales 
Engineer, Business Develop- 
ment Manager. Finance 
Manager. Please send resume. 
salary history and position 
applied for to: 460 Park Avenue 
South, Suite #1101, New York, 
NY 10016, Attn: H.R. Manager 


Technical Support Specialist 
assign and coordinates work 
projects; establish work priorities 
and evaluate cost and time 
requirements; review and test 
programs to ensure compliance 
with specifications and stan- 
dards; evaluate and test vendor 
supplied software packages to 
determine compatibility with 
existing systems; maintain com- 
pany network system and web- 
site, process e-commerce. Req 
BS or foreign equivalent in CS or 
IS wiproficiency in SQL, Intel 
Xeon & Itanium Server support, 
TCP/IP, network HW/SW instal- 
lation, configuration, and trou- 
bleshooting 40hr/wk 9-5 
Contact recruiter PC Source, 
Inc. 3004 Adriatic Court 
Norcross, GA 30071 


Actuate IT Technical Lead, Wa- 
chovia Securities, Chicago, IL 
Develop, create and modify com- 
puter appl. software using Actu 
ate software. Reqs. BA in Com- 
puter Science and 4 yrs exp. in 
pos. or as Software Engineer. 
The 4 yrs. must inci. developing 
software and web appl. solutions 
using Actuate software and work 
integratingActuate into .Net 
appls, externalizing security (w/o 
use of LDAP), developing usage 
reports incl. transient reports. 
designing object oriented appli. in 
the Actuate framework, report 
dvip., publ. tech. doc. and con- 
ducting stress tests and develop- 
ing queries against Oracle and/or 
DBZ. 2 yrs. of req.exp. must inc! 
developing appls. using Micro- 
soft's Net framework. Must be 
Actuate certified. M-F, 8-5, Send 
resume to Geri Ann Henderson 
Wachovia Corp., 401 S Tryon 
Street, NC 0958, Charlotte, NC 
28288-0958. No phone calis 


Requirements Analyst need- 
ed at client sites to gather 
business reqmts, analyze & 
dvip scenarios; prgm_ in 
Siebel, Java, JSP, C++, SQLI/ 
PLSQL; test using Win 
Runner, LoadRunner, Test 
Director; UML modeling using 
CaliberRM; data modeling 
using SAS, SPSS; OO data 
modeling & db dsgn. Resume 
to: Global Consultants, Attn 
Hireme, 25 Airport Rd., 
Morristown, NJ 07960 


Communications Engineer 
Homestead, FL - wanted by 
telecommunication & entertain- 
ment provider. Monitor & trou- 
bleshoot the uplinking, downlink- 
ing & transmissions of digital 
voice, image & data files. 
Monitor & troubleshoot the inter- 
connectivity of satellite to fiber 
optic/fiber optic to satellite hard- 
ware. Troubleshoot reception & 
amplification issues during 
transmissions. B.S Electronics & 
Communications Eng or foreign 
equivalence & 2 yr exp. in job 
offered. Fax resume to Satuple, 
Inc. attn: Human Resources at 
305-247-8011 


North East Fasteners, Inc. is 
looking for systems devel- 
opers to define and design 
Page architecture and navi- 
gation models; develop data 
models and databases; and 
administer databases. Must 
have at least bachelors de- 
gree in computer engineer- 
ing or related major. Please 
send all resumes to North 
East Fasteners, Inc. 8 
Tremco Dr., Terryville, CT 
06786, attn.: Human Re- 
source Department 


Computer Support Specialist 
to support computing infra- 
Structure including servers, 
email, apps, network, dbs & 
users. Requires MS in Comp 
Sci & min 2 yrs exp w/Novell, 
Solaris, Linux & MS Windows: 
systems, LAN/WAN network- 
ing, web server & SQL server; 
familiarity w/Visual Basic, 
Oracle, .Net, XML & ASP 
required. Send resume to 
Human Resources, Sunrise 
Global Inc., 4000 Bordentown 
Ave., Sayreville, NJ 08872, or 
fax to 732-651-9998 


Software QA Eng IV, Team 
Leader - Est. overall test auto- 
mation direction for one or mult 
Product lines, automate func- 
tional & scalability test scenar- 
ios. Review project req's, tech 
documentation, define project 
test strategy. Review & define 
test case docs. Track defects & 
approve project release. Train/ 
supervise junior team members 
REQ: BA/BS CIS/IT/Eng, 8 yrs 
as SQAE, 5 yrs test automation 
exp, 3 yrs DB testing exp, 3 yrs 
automated performance & scal- 
ability testing w/ comm'! perf test 
tool, project mgmt exp. 2 pos 
avail. Resume: m013_04@ 
Onesource.com. OneSource is. 
an Equal Oppty Employer 
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Software Engineer 


Seeking individual with experi- 
ence working with application 
servers (ATG Dynamo 4.1/ 5.1), 
operating systems (Windows 
NT, Sun Solaris, UNIX, Net- 
ware), programming languages 
(Visual Basic, JAVA, ASP, 
COBOL, C), software configura- 
tion tools (Rational ClearCase 
3.2.1), and effective communi- 
cation skills. Must have BS, 5 
years experience as software 
engineer, Sun Certified Java 
Programmer, and_ significant 
experience programming. Sal- 
ary $55,000. Send resume and 
cover letter outlining minimum 
quélifications to Provion, 1501 
Commerce Ave., Carlisle, PA 
17013. 


Computers - Development Man- 
agers needed. Seeking qual 
candidates possessing MS or 
equiv. and/or rel. work exp. Part 
of the req. rel. exp. must include 
3 yrs. working with Java. Duties 
include: Design, develop & 
implement software systems & 
applications; Monitor & coordi- 
nate software systems using 
development & integration. Fwd 
resume & ref. to: Globecom 
Software, Attn: HR, 1702 N 
Fairmount St. #101, Wichita, KS 
67208 


Welcome to IT Careers 


find » job employers te 


find ajob 


features & tips 


18 special packages and supplements 


is salanes 
issues 


ros & tips 


advertiser tools 


Cigniti has openings for System 
Analysts or Software Engineers 
Candidates must have BS/MS 
with experience. Use skills such 
as Java, Cobol, EJB, ERP, 
Oracle, SQL, VB, C/C++. Travel 
may be required for some jobs. 
Competitive salary. Please apply 


at info@cigniti.ccom. No calls 
EOE 


IT specialists wanted by AR- 
WANO, Inc. for positions using 
Oracle, SQL, VB, C/C++, SAP, 
AS/400, RPGLE, COBOL/ 400, 
CL, SQL/400, Query/400, Or- 
acle RDBMS, Developer 2000, 
Windows NT. Minimum is BS 
degree with IT exp. Travel 
maybe required. Please apply at 
waseem@arwang.com. EOE 


Applications Engineer 
required by Hayward, CA, 
based chain of shoe retail- 
ers. Requires Bachelor's 
degree in any engineering 
field. Must be knowledge- 
able in code development, 
Java 1.2 and 2.0, and Java 
with Oracle databases for 
web based projects. Send 
resume to Rosa Rahemi, 
VP of Finance, Sheikh 
Shoes, 2247 Commerce 
Place, Hayward, CA 94545, 


www.itcareers.com 


is the place where your 


fellow readers are getting a 


jump on even more of the 


world's best jobs. 


Now combined with 


CareerJournal.com, you have 


more jobs to choose from. 


Wwww.itcareers.com 
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IT|Careers.com 


Systems Analyst 


Develops & implements systems 
for variety of industries. Must 
have Bach. in comp. sci. or eng. 
plus two yrs. prof. exp. in senior 
Supply chain planning, logistics 
& business process transforma- 
tion w/ Manugistics Advanced 
Planning & Scheduling, SAP R3. 
Oracle& rel. lang. & tools, Perl 
SQL Loader & Web Intel. Fre- 
quent travel & relocation 
$67 ,000/yr., F/T, hrs vary. Send 
resumes to Pgh/Alleg. Cty 
Careerlink Attn: CL Program- 
Super., 425 6th Ave., Ste 
2200,Pgh, PA 15219-1837. Ref. 
Job Order # WEB 433084 


QA/Testing Analyst needed 

itcareers.com in Wichita to perform & lead 
team for complex testing on 

complex projects using Soft- 

Products 
Portfolio, Internet based prod: 
ucts RIO. Leisure Mgmt 
Landmark, IGS Worldwide 
Medallion & Mercury WinRunner 
in Hospitality domain; assist 


brands S/ware 


can solve the 


wiinstallation probierr plan & 
impimt automated _ testing 
research & dvip mktg reqmts. 


Resume SoftBrands 


Hospitality, Two Meridian 


Crossings #800, Minneapolis 
labyrinth of MN 5: 
cic 


Systems Administrator (with 
Bachelors degree and 5 years 
Columbus, OH 


entails and requires experi- 


job hunting 


experience) 


ence in configuration and main 

tenance of sys using 

Veritas Backup, Windows Active 

Directory, Sun Solaris and Citrix 

Metaframe and Exchange 

matching the chaetlee: aicdleis Shueteane tabine 

P3, Expedition and Kana 

Relocation within USA Possible 

‘active ompensation pack 

age. Send resume to Priya 

Venkat, Technology Software 

Inc., 1515 Bethel Rd., Suite 304 
Columbus, OH 43220 


right IT skills 


Computer Professional (Multiple 
, Openings) - Wiexp in one or 
with the ri more of the following skills: C 
C++, JAVA, Power Builder, Vi- 
sual Basic, Oracle, Developer 
00, Sybase, Windows, Unix 
in, People Soft, SQ! Server, 
SAP. Oracle Applications »bol 

Db2, AS/400, ASP, .net 


Lucrative compensation. Please 
E-mail your Resumes to the fol 
lowing address 

RESUMES@COMDATAUS.COM 


IT position. 


Attn. HR Department 

Comdata Consulting, Inc 

2775 Algonquin Rd 

Suite # 240 

Rolling Meadows, !L-60008 

VISIT WWW.COMDATAUS.COM 
or More Details 


Find out more 


BlazeTech Corp. is hiring 
Senior Engineers. Design 
/Develop/maintain engg 
computational models & 
software applications, de- 
velop interfaces, maintain 
web infrastructure/content 
and RDBMS. Send res- 
umes to BlazeTech, 24 
Thorndike Street, Cam- 
bridge, MA 02141. Appli- 
cants must meet educa- 
tional and work experi- 
ence requirements 


www.itcareers.com 


Systems Analyst needed at 
Client sites to dsgn, dvip, impimt 
Web based applics using current 
technology incl Oracle Finan- 
cials 11i (PO, AP, GL, AR, FA 
INV, HR, Application Object 
Libraries & System Admin- 
istration), Oracle 9i/9IAS, Ore 
Web Application Server, PLSQL 
Cartridges Oracle 
6i/Reports 61, Dvipr 2000, Dsgnr 
2000, SQL/PLSQL Prgmg, UNIX 
Shell Prgmg, Pro*C, SQL 
Loader, SABLIME, HTML & 
Javascrip 

Solutions. 


os 


ir, Windmere. 


Sr Programme: 
ram & design s/ware 
nents using Visual 
Basic, Visual Si 
SQL, HIS, ADO 
SNA Server, ATL 

COMTI, N_tier, Laureate. 
DCOM, and MTS. Bachelor, or 
equiv, in CS, Eng’g, E 
similar, req'd, as is 
in job off'd or a systems ar 
sis position. Mail resumes to 
Cuniffe, Job #1915.2 
Mae, Inc., 11100 USA Parkw: 


Fishers, IN 46238. 


plement 


systems 


g ABAP/é 


programmir 


urrent & future bu 

35 hrs/wk. Must he 
comp sci, MIS, Ele 
Mech Engrg & 2 yrs ext 
Contact AIG SunAmer 
Pro. Staffing Mar 

the Stars, Cen 

90067 & quote #125 


Sr. Quality Eng. wanted 
by company engaged in 
graphics and multimedia 
technology design, manu- 
facturing and marketing 
Requires Bach. in 

EE plus 5 yrs exp. inc 
ing audio/video software 
Reply to ATI Research 


Inc. H.R. Dept., Attn: K.B 
62 Forest Street, Marl- 
borough, MA 01752 


Software Engineer to work 
on eGovernment and 
eCommerce software solu- 
tions. Analyze business & 
technical needs to develop 
customized programs and 
perform related duties 
Bachelor's degree and 2 yrs 
related experience req- 
uired. Send resume to 
Periscope Holdings, Inc 
319 Congress Avenue 
Suite 200, Austin, TX 
78701 


Mae B Melon a 


SOFTWARE ENGINEER 


PCTEL Inc. a global leader in 
simplifying mobility seeks an 
experienced Software Engineer 
to research and analyze highly 
sophisticated applications for 
business users. Selected candi- 
date will be responsible for all 
phases of software development 
including architecture, design 
velopme esting and de 
bugging state-of-the-art soft 
ware applications. As a member 
of a development team you will 
develop a multi-protocol inter- 
face for IP networks, using 
C/C++, JAVA, Linux (Unix 
SQL, SNMP, TC/IP and wireless 
LAN’s protocol. Duties involve 
both changes to existing soft- 
re 1 the creation of new 
software applications. Will be 
responsible for formulating a 
plan outlining the steps to de 
Op programs using structural 
analysis and design techniques. 
and preparing flow-charts and 
jiagrams to llustrate the 
sequence steps a program must 
follow and describe the logicai 
operation involved. Requires 
Bachelor of Science in Compu 
er Science or its equivalent plus 
minimum of two years direct 
xperience in the job offered 


sition also requires travel to 
astern Europe approx. 20% of 


year. Candidate must be 


7m Uo 


legally eligible to work in the 
United States for any employer 
Send your resume directly to 
iobs@pctel.com Please include 
Software Engineer 

e subject line. Or mai 
HR Dept., PCTEL, Inc 
te 400 


Inc. is 


Information Systems 
Professionals 


pleme 


major ‘oducts. Participate 
the t y and h 
delivery of product: implemen: 
tation, integration, design, cod 
ing, testing and documentation 
f custom application software: 
evaluate user requirements 
in team 
2nt procedures 
and needs; support and train 
end-users. Technologies/ P' 
forms used include U 
Windows NT, SQL Server. 


Oracle 


Visual Basic, Java, Cobol and 
other appropr 
ng languages 
arver, Network 
frame environments t 
have a Bachelors degree, or its 
valent. We are hiring at all 
ce levels. Please send 
Human Resi 
ghtsbridge Solut 
Madison Ave., Suite 


3g L 60661 


cruiting@knightsbridge.co' 


Technical Marketing Managers 
company’s IT products & ser. 
s. Responsible for technicz 

sales & marke of custom 

solutions to clie the bank 


1g & financial services indus 


tries. Determine tomer IT 


requirements and 
sales & marketing oresen- 
Bachelor's degree in 
computer ienc ngineering 
ated field, plus 3 years 
ce in marketing of IT 
software products & services 
Up to 1 year experience may be 
satisfied with master's degree in 
marketing. managem 
finance Send resume and 
salary requirements to i-flex 
solutions inc., 99 Park Avenue. 
15th Fi, New York, NY 10016. 
attn: HR Manager. All respons- 
es must include job code 
BOS604 


IT PROFESSIONALS 
Manager 


(Glen Mills, Pennsylvania and other locations through the U.S.). Will over 
see consulting engagements for major corporate clients. Will meet with 
client management to assess strategic planning and business operational 
requirements in order to determine engagement scope, staffing, and bud- 
get. Will review engagement pians with assigned professional 

oversee analysis of client glo pply chain and 

Collabora- 
as PTC Windchill, & Agile Software 
implementation; logis! operations for Transportation/War use Man- 
agement Systems rations excel 
lence for Enterprise Resource as Oracle, SAP and 
MFG/PRO implementation professional 
Consultants and Business A\ ts regardin ni ient specific 
data to formulate recomme 

the implementation rational 


supply chain strat juct development proce 
tive Product Commerce 


porations. The wai ffered is $106 
Monday-Friday, 9:00 am t 

follows: Bachelor 

Engineering (any 

years of experien: 

Consultant, Technolc 

Designer. Re 

Transp 

Ent 

Cc 


Please send you nber WEB433066 tc 
the: PA Care , W Avenue, Philadelphia, PA 


19144 


IT PROFESSIONA 
Consultant 


(Glen Mills 
lient business 
parisons to decide implerr 
and technical designs 
Siebel as the Cust > 
ntegrate Siebel with mu 
Enterprise Application Integratior 
information Highway 
indary systems t 
ntation. Perform We! 


WAGE: $54 
Hours worked 


MINIMUM REQUIRE 
Bachelor's 

type), Math 

half years 

nclude < 


Managements 


WEB433154 t 





Systems Analyst sc 

employer 

Services 

CS or MIS. 

using HTML, Jav 

ASP, VB Script & SQL Se: 

yfs exp using s/ware pkgs su 
as CDP Visual Knowledge 
Manager & Visual Studio. Know 
of print data files such as AFP. 
DJDE & METACODE reqd 
Presentation, Document 
Training skills reqd 

know! of Win NT, 2000 

systems. Knowl of: XML 

MTS, FOP PDF, MS !IS, SMTP & 
JRun reqd. M-F 8-5. Responses 
to Scott Erickson, HR Mgr. 
Moore Wallace Business 
Communication Svcs, 630 W 
1000 North, Logan, UT 84321 
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Software Engineer - System 
Analysis and Design, Temple 
Terrace, FL 
op business process automation 
software for large OLTP (On- 
Line Transaction Processing) 
system on a client-server archi- 
tecture j C, C++, RDBMS. 


sign and devel- 


database de. 
ent, cross 
are infrastruc 


re and 


nd 


accuracy 
orporate 
ns; ana 
ode, test, est 
mpiement service re- 
r solutions ustomer 
dentify, recor 
ument effective 
dologies and tools 
d during design, cod- 
mplementation and 
1ce phases. Requires 
n Computer gin 
eering and either r 3 years expe 
rience in the job offered or 3 
ears experience in the develop- 
nent of client-server solutions 
on large OLTP syst 
++ and RDGBMS 


buted arch 


Software Engineer 


technical sur 


administr 


wk 
pies of resume 
u of Labor Standards, 45 
House Station, Augusta 
Maine, 04333-0045 Please refer 
to Job Order #50555 for Soft- 
ware Engineer 


ae bueton a 


Software Engineer (in Temple 
Terrace, FL) to perform circuit- 
provisioning system design and 
development using C++, Oracle 
and J2EE on a UNIX platform 
provide conceptual and high- 
tech solutions to complex busi- 
ness and technical problems 
develop and implement stan- 
dards and verify results; provide 
technical expertise in operating 
systems and applications sys- 
tems in the telecommunications 
ndustry; design and develop 
business process automation 
systems for the telecommunica- 
tion industry on client-server 
architecture using C++, Oracle 
and J2EE; provide technical so- 
lutions to meet documented re- 
quirements within schedule 
identify, recommend and docu- 
ment effective de: method- 
ologies and tools to be utilized 
during the design, coding, test- 
ing, implementation and installa 
tion phases. Requires Bachelors 
in Engineering or Compu 
ence and either 1 year exp in the 
offered or 1 r exp in cir 
provisioning system design 
and development using C++ 
Oracle, and J2EE on a UNIX 
platform. Salary $64,200/yr, Mon 
-Fri, 8AM-5PM, 40 hrs/wk. Send 
resume to Workforce Program 
Support Box 10869. 
Tallahasse 302-0869 
refer to : 


Software Engineer, Temple Ter- 
race, FL - perform client-server 
architecture application develop: 
ment using C/C++, CORBA and 
nformix on a UNIX platform; de 
sign and develop business pro- 
cess mation for the telecom 
industry using cross platform in 
iiddieware infrastructure 
d perform inter-process: 
ation and system calls 
coordination model 
h a configuration man 
system; provide cor 
architectural solutions to 
network business 
vide senior manage. 
ign recommenda: 
rnatives; design 
»visioning and inven 
systems; interface 
2 existing legacy sys: 
coordination be 
ited systems help: 
1 network operations. 
Masters in Electr 
3 or Computer 
either 3 yrs. experi 
job offered or 3 yrs 
ver archi 
velopment 
ustry using 
‘C++, CORBA and Informix on 
UNIX platform. Salary $84,800. 
40 hrs/wk, 8AM-5PM, Mon: 
Send resume to Workforce 
Support. PO. B 
Tallahassee, FL 


refer t b Order 


ftware Engineer 
ple IT 
Degree 


in XML 


Seeking qualified candidates 
for Sr. & mid-level IT profes 
sional positions including 
Programmer Analysts, Data 
base Administrators, Software 
Engineers, IT/Software and 
similar type positions. Candi 
lates must possess MS/BS or 
equivalent and/or related 
work experience. Please mail 
resume and references to: 
Patel Consultants Corp. 
Attn: HR 
1525 Morris Ave. 
Union, NJ 07083 fo; 


Software Engineer (Temple 
Terrace, FL) to provide advice to 
management on complex tech- 
nical issues and appropriate 
application of technologies relat 
ing to OLTP (on-line transaction 
processing) software appli 
tions development using C++ 
UNIX, Oracle reiational data- 
base and Java; design, analyze. 
estimate and implement service 
reques to ensure solutions 
meet customer requirements 
identify, recommend and docu- 
ment effective design method- 
ologies and tools to utilize during 
the design, coding, testing and 
mplementation of installation 
phases. Requires Bachelors in 
Computer Science and either 5 
yrs exp in job offered or 5 yrs 
exp in OLTP software applica- 
tion development using C++ 
UNIX and Oracle. Salary 
$77,300/yr, Mon-Fri, 8AM-5PM 
40 hrs/wk. Send resume to 
Workforce Program Support 
P.O. Box 10869, Tallahassee, FL 
32302-0869, refer to J.O. # FL 
253118 


SOFTWARE ENGINEER to de- 
sign, deve’ configure, trou- 
bleshoot and customize various 
PeopleSoft modules, including 
GL, AM, AP, AR, EX, PC and 
CA, using PeopleSoft Finan- 
cials, BPM, Peopletools and MS 
SQL Server while successfully 
adhering to company's project 
life cycle proc uire: M.S 
degree in Computer Science: 
Engineering, Info. Systems, or a 
closely related field with 2 yrs of 
experience in the job offered or 
as a Programmer/Analyst. Ex- 
tensive travel on assignments to 
t sites within the 
required. Competitive 
salary red. Apply by resume 
to: Rajender Gaddam, Director 
of HR, Orpine Enterprises, LLC 
1004 Crooked Creek Court 
Mabieton, GA 30126; Attn: Jot 
HS 


ED TO HIRI 
FAST? 
START HERI 
IRST! 


ireers and 
itcaree om rt 
more 
profes 
sionals ev week 
If you need to 
aler start 


hiring us. 


Check us out at: 
www.itcareers.com 


or 


call (800) 762-2977 


Computerworld 


IT|careers.com 


Ee Be 


BETTER J|-OB 


HELPING 
ori wre 
Search our jobs database 
and post your resume on 


Www.itcareers.com! 
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enterprise integration 


network vulnerabilities 


corporate data security 
government compliance 
mobile & wireless security 


business management needs 


The right IT professional 
can jump the hurdles of 


today’s IT challenges. 


Call: 


(800) 762-2977 


Cwo71204N/5, 


Software Engineer (Temple Ter- 
race, FL) - Design, develop, and 
implement applications and sys- 
tems for telecommunications 
industry by programming main 
frame appicaitons using COBOL 
MVS and JCL (Job Control La 
guage) and using client/se 
programs including UNIX 
Informix and PERL; design, de 
velop, and test data processing 
service requirst for carrier access 
billing system and activiation 
Requires Bachelors in Computer 
informaiton Systems or Manage 
ment Information Systems and 
either 4 yrs exp in job offered or 
4 yrs exp in programming main 
frame appliciatons using COBOL 
and JCL with experience to 
include 6 months designing and 
implementing applications for 
telecom industry using client 
server programs. Salary $62,100 
yr, Mon-Fri, 8AM-5PM, 40 hrs: 
wk. Send resume to Worforce 
Program Support, P.O 
10869, Tallahassee, FL 

0869, refer to J.O. # FL-2: 


Systems Analyst: Analyzes 

modifies, and maintains 
computer programs or systems 
using Oracle, VB or Java, and 
related technologies in UNIX 
VMS and NT platforms. Formu- 
lates program and system de- 
sign procedures, test plans, and 
program development specifica- 
tions. Prepares technical docu- 
mentation. Must have BS or 
equivaient in CS/Math/Engineer 
ing or related. Must have 2 yrs 
ftware 
design, development & integra- 
tion using Oracle and VB Will 
accept a credential evaluation 
by a recognized authority as 
equivalent to a bachelor's 
gree. Must be willing to 
assigned to unanticipated client 
sites throughout the United 
States. Salary:$80,000/yr Hrs 
8:00am-5:00pm, 40/wk. Please 
send 2 copies of resume to 
Case No. 200300938, Division 
of Career Services, Labor Certi- 
fication Unit, 19 Staniford St., 1st 
Fi, Boston, MA 02114 


exp. in job offered or in S 


Positions are 
Columbus, Ohio 
Developers with a com 
develops software solutions for 
the healthcare industry. The 
Software Developers will work 
under direct supervision to de- 
velop, program, and test appli- 
cations for hospital billing sys- 
tems and assist with modifica- 
tions. Candidates for this posi- 
tion should possess a Bachel- 
or's degree in Computer Sci- 
ence, Life Sciences with Com- 
puter Science concentration, or 
a computer field and at least 6 
months’ experience in computer 
programming; and demonstrat- 
ed knowledge of C++ or C# and 
one of the following, JAVA 
Oracle, or Access. 
Apply with resume by mail to 

Ms. Maria Dress 

Per-Se Technologies, Inc 

26777 Lorain Road 

Suite 304 

North Olmstead, Ohio 44070 


Select Source International has 
opportunities for Computer 
Programmers, Programmer An- 
alysts, Systems Analysts, Soft- 
ware Engineers, DBA’s and 
Software Consu!tants with exp. 
in two or more of the following 
skills: OOD, SQL, PL/SQL 
Java, J2EE, WSAD, Unix, DB2, 
MVS, CICS, COBOL, Visual 
Basic, C++, C#, Oracle, Sy- 
base, Crystal Reports, Java- 
Script, HTML, DHTML, IIS 
ASP, .NET, RETEK RMS & 
RDM. BS or MS depending on 
position. 1yr exp reqd depend- 
ing on position We also accept 
the foreign edu. equiv. or any 
suitable comb. of edu., training 
or exp. Frequent travel & relo- 
cation. Send résumé and sal- 
ary reqmts to: Select Source 
International 10501 Wayzata 
Bivd, Ste 200, Minnetonka, MN 
55305. Visit our website at 
www.S3Cl.com 


power 7 
| SQL Server Database 
Administrator Developer- | 
| For various unanticipated | 
; Client locations throughout the | 
jU S. Provides support for the | 
| Client’s financial database; 
| Makes enhancements to 
| interfaces using Visual Basic | 
and SQL Server. Requires a 
| bachelor’s degree or foreign | 
| equivalent in Com. Science 
| Engineering, Com. Engineer, 
| Info. Systems or related field 
| and three years of experience | 
in the field such as software | 
|consultant, programmer! | 
analyst, etc. Annual salary | 
$81,120 
| Submit resume or C.V. to: 
PA CareerLink, FLC Unit 
235 W. Chelten Avenue 
Philadelphia, PA 19144 
Job order number 
WEB 431234 


Systems Engineer, Tempie Ter- 
race, FL - develop applications 
using C++, Informix database. 
CORBA and J2EE technologies 
in a telecom domain for DSL. 
loop qualification and IP/VPN 
(internet protocol voice over and 
virtual private network); respon- 
sible for providing system solu- 
tions for broadband technolo- 
gies; develop and maintain auto- 
mated broadband provisioning 
systems on client server archi- 

provide management 

lem design recommen- 
dations in conformance with 
guidelines and coordinate imple- 
mentation of design. Requires 
Bachelors in Electrical Engineer- 
ing or Computer Science and 
either 3 yrs. Exp in the job of- 
fered or 3 yrs. Exp. in application 
development using C++, Inform: 
ix database, CORBA and J2EE 
technologies in a telecom do- 
main for DSL, loop qualification 
and IP/VPN. Salary $75,000/yr, 
40 hrs/week, 8 AM to 5 PM, Mon 
-Fri. Send resume to Workforce 
Program Support, P.O. Box 
10869, Tallahassee, FL 32302- 
0869, refer to Job Order #FL- 
2531856 


Application Developer. Software 
analysis & development for man- 
agement information systems 
Web-based development, techni- 
cal documentation & support 
Tech environment: .NET Tech. 
nology; Visual Basic; VB.NET; 
ASP.NET, Crystal Reports; SQL 
Server, JavaScript; HTML. Bach- 
elor's in Comp. Sci. + 6 mo. exp 
in job offered or as Programmer 
or Student Application Program- 
mer req'd. Education must in- 
clude 1 project each in .NET 
Technology & JavaScript. 40 
hrs/wk, 8:30am-6pm, $48,000/yr. 
Job location: Boca Raton, FL 
Must have proof of legai authori- 
ty to work in the U.S. Submit res- 
ume to Workforce Program Sup- 
port, PO Box 10869, Tallahas- 
see, FL 32302-0869. RE: JOFL# 
2531718. Employer pd ad. 


Verinon Technology Solutions 
Ltd. is looking for the following 
personnel: Software Engineers/ 
Programmer Analysts/Manage- 
ment Analysts 3) QA Analysts 
Should have a Bachelor's De- 
gree in Computer Science/Re- 
lated field with 2 years experi- 
ence in any 2 of the following 
Java, XML, J2EE, EDI, Rational 
Rose, WinRunner, LoadRunner, 
TestDirector, C++, EJB, Siebel 
Web Application Servers, Orac- 
le, DB2, Sybase, MS SQL Ser- 
ver, SQL, PL/SQL, Coidfusion, 
Documentum, PeopleSoft,SAP, 
Unix Scripts, JD Edwards, SAS, 
Visual Basic, ASP, ADO, Net, 
Visual C++, Business Objects, 
Lotus Notes, Informatica, Data- 
Stage, Abinitio and Cognos. We 
offer competitive salary and ben- 
efits. Mail Resume to Human 
Resources, Verinon Technology 
Solutions Ltd,825 E Rand Road, 
Suite 210, Arlington Heights, IL 
60004. 
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Programmer Analysts - Conseco 
Services, LLC, Carmel, Indiana 
has positions for programmer 
analysts to plan, develop, test 
and document computer pro- 
grams applying knowledge of 
program techniques and cor 
puter systems; provide expertise 
to programmer analysts in the 
U.S. and India for programming 
projects being executed in India 
for U.S. customers; interface 
with marketing managers and 
support marketing initiatives by 
preoaring the required materials 
and presentations; perform and 
provide expertise analysts in 
coding, testing, validation, and 

de installation as well a: 

le maintenance and support 
of software applications; com- 
municate between transbo 
operations; configuration m 
agement of program c 
customer, and update ¢ 
and develop new training > 
ules for programmers and ana 
lysts. Candidates must have a 
bachelor's degree in computer 
Science or a related field 
Candidates must be authorized 
to work permanently in the 
United States. Please direct 
resumes to Bernard Hodes 
Group Reply Service, #83152 
8440 Woodfield Crossing, Suite 
290, Indianapolis, IN 46240. No 
phone calls, please. An equal 
opportunity employer. 


Oracle Data Warehouse Engin-| 
eer: Perform application analy-| 
sis, design, development, testing 
and support in client server, multi 
tier architecture and data ware- 
house applications on Unix and 
Windows Platforms. Work p 
arily on Data Warehouse and 
terprise Applications on Orac 
RDBMS, Oracle Applications, PL 
SQL, Java, XML acle Devel- 
oper 2000 (Forms and Reports). 
Discoverer, Designer, ETL, Infor 
matica and BI tools such as Bus. 
iness Objects. Perform database 
tuning and application tuning and 
develop procedures using Pl 
SQL. Develop scripts using PL 
SQL and Shell on Oracle and 
Unix. Req: Bachelor Degree 
Computer Science, Engineering 
or related field and two yrs 
rience performing apy 
sign/development on ¢ 

house and enterprise applic 
using Oracle RDBMS, PL/S‘ 
Forms, Reports, ETL, Informat 
ca, Bi Business Objects, data 
base tuning, Oracle Applicatior 
Modules and Sheil Scripts on 
Unix and Windows. If no degree 
or unrelated degree will accept 
applicants with three years of 
college level education and three 
years of application design and 
development experience 
which two years is the specif 
experience stated above. Job 
Location; will work at various 
client sites throughout the U.S 
as assigned by employer. Salary 
$70,000/year. Send two copies 
of resume/letter of application to: 
Job Order #2004-920, P.O. Box 
989, Concord, NH 03302-0989. 


Software Engineer (in Temple 
Terrace, FL) to design and de 
velop automated work assic 
ment and tracking software 
packages using C and C++ 
Windows and UNIX environ- 
ment; develop applications us- 
ing client/server architecture 
object-oriented system design 
and programming, UNIX and 
Windows platforms, algorithm 
design and implementation; per 
form network and internet soft- 
ware development; identify, rec- 
ommend and document effec- 
tive design methodologies and 
toois for the design, coding, test 
ing, implementation and installa- 
tion phases. Requires Masters 
degree in Computer Science 
and either 1 year exp in job 
offered or 1 year exp in design- 
ing and developing automated 
work assignment and tracking 
software packages using C and 
C++ in a Windows and UNIX 
environment. Salary $62,000/yr. 
Mon-Fri, 8AM-5PM, 40 hrs/wk 
Send resume to Workforce 
Program Support, P.O. Box 
10869, Taliahassee, FL 32302 
0869, refer to JO # FL- 
2531406. 


Software Engineer, Temple 
Terrace, FL - design and devel- 
op security and reports wet 
infrastructure using Java server 
pages and serviets to support 
mission architecture; desig: 
cross-browser based web 
graphical user interface using 
scripting language; develop in- 
terfaces to supplier gateway and 
billing system using C 
CORBA, Java and Orac’ 
Unix platform in a multi-thr 
environment, develop database 
libraries using Oracle Call inter- 
face to access Oracle database 
design database structure and 
application servers in C++ to 
access database; develop Java 
swing based client screens; pro 
vide advice to management on 
complex technical issues and 
appropriate application of h- 
nologies relating database 
management »perating sys 
tems, business object 
oriented design, system perfor 
mance and data e man 
agement. Requires Masters in 
Computer Science or Computer 
Engin 
experience in the job offered 
yrs. @ ence 
developme: or the web using 
CORBA, Java and Oracle 
1 a UNIX platform. Salary 
78,000/vr, 40 hrs/week, 8AM. 


PM. Mon-Fri. Send escume t 


Workforce Program Support 
Box 10869, Tallahasse 
1869, refer to Job Order 


-2532334 


Programmer Analyst 
(JBM Mainframe) - 
Multiple Openings 


integration 
support and 
volume or ansaction pre 
essing and be application 
systems ir a ulti-hardware. 


software enviror 


guag 
tion Languages (4¢ 
tools and Transact 
sing Software. Bach 


gree (or equivalent 


ave appropriate 
skills as follows 
and 1 of B and 1 of C 
and 2 of B 
A includes [ 


IMS DC, IDMS 
QMF, VSAM an 
bench; and 
1EF, ADW and APS: High 
mobility prefe 40 hrs/week 
8 am - 5 pm. $66,533 - $7: 
year. Qualified applicants 
tact or send resume 
Program 
diana County 
CareerLink, 300 Indian Springs 
Road, indiana, PA 15701. Refer 
to Job Order # WEB 433178 


Software Engineer - Systems 
Analysis & Programming 
Temple Terrace, FL): To lead the 
design and development of tele 

mmunications software sys. 
tem solutions relating to complex 
architectural and design issues 
analyze software requirements 
and define ta architecture by 
translating quirements and 
processes into detailed strat 
decisions for implementatic 
software engineers and opera 
tion personnel; deve 
direct to develop s 
grams used in the telecc 
cations industry using 
programming languages ud 
ing Java, C, C++, H Oracle. 
and XML, running u 
platforms and opera’ 

ndows, and 

Linux. Requires Masters in Com 
puter Sc ph 1 year 
exp in job offered or 1 year exp ir 
telecommunications software di 
velopment using C++, Or 
Java and HTML. Salary $92,10 
yr, Mon-Fri. 8MA-5PM. 40 hrs. 
Workforce 
Program Support, P.O. Box 
10869, Tallaha FL 32302 
0869, refer to J.O. 


wk. Send resui 
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Continued from page 1 
Privacy Law 


ernment, said the county be- 
came aware of the problem 
only after being notified by 
Computerworld. A prelimi- 
nary investigation revealed 
that the problem, which has 
since been fixed, was the re- 
sult of some county employ- 
ees using erroneous e-mail 
address books and was not 
caused by a virus or worm in- 
fection, he said. 

According to Whittington, 
the glitch stemmed from the 
county’s Internet naming 
structure, which includes “.ac” 
for the auditor controller’s of- 
fice. “Now we need to re- 
search who has the bad ad- 
dress book that has this ad- 
dress,” he said. 

Whittington said his office 
was never directly informed 
about the problem by Car- 
lesten and noted that any 
county employees who may 
have received e-mail responses 
from Carlesten never brought 
the matter to his attention. 


Legal Applicability 

Joanne McNabb, chief of Cali- 
fornia’s Office of Privacy Pro- 
tection, said an initial review 
of the language contained in 
California’s Senate Bill 1386 
concluded that the privacy law 
doesn’t apply to local govern- 
ments in the state. The law 
stipulates that individuals 
must be informed if their per- 
sonal information has been 
compromised. 

According to McNabb, SB 
1386, which went into effect on 
July 1 last year, applies to “per- 
sons or entities” doing busi- 
ness in the state. Likewise, the 
Information Practices Act, 
which is the California equiva- 
lent of the Federal Privacy Act, 
applies only to state agencies 
and not to local government 
agencies, she said. 

However, “our recommen- 
dation beyond minimum com- 
pliance with the law is to let 
people know” that their per- 





sonal information has been 
compromised, said McNabb. 
Whittington said the extent 


| of the compromise is still un- 


der investigation and that no 
decision has been made re- 
garding notifying affected 
employees. 

However, some legal ana- 
lysts said the law does indeed 
apply to the county. If it does, 
the Contra Costa County case 
would be the first major test of 
the new legislation. 

Harold J. Krent, dean of the 
Chicago-Kent College of Law, 
said it’s unclear whether local 
government agencies, even if 
exempt from the statute, fall 
within the definition of the 
term person as contained in a 
companion provision of the 
bill. If so, they would be re- 
quired to notify individuals of 
any breach, he said. 

“In similar statutory con- 
texts, ‘person’ has generally 


Continued from page 1 


ERP Delays 


ucts such as pipelines and 
copper tubing and sells 
plumbing and electrical sup- 
plies. The company is in- 
stalling an ERP system based 
on PeopleSoft EnterpriseOne, 
a line of midmarket-oriented 
applications that were devel- 
oped by J.D. Edwards & Co. 
prior to its buyout by People- 
Soft last year. 

PeopleSoft declined to dis- 
cuss the software rollout at 
Crane except to say that it’s 
largely complete and that the 
two companies are cooperat- 
ing with each other. “We con- 
tinue to have a close working 
relationship with Crane in the 
ongoing rollout of their IT 
system,” said PeopleSoft 
spokesman Steve Swasey. 

Greg Sedgwick, Crane’s 
general manager, said two 
weeks ago during a webcast 
for investors that all 42 of the 
company’s manufacturing and 
warehouse sites are live with 





<DTERR@sc.co. contra-costa.ca.us> 


To: tLim@ac.cccounty.us 


ce: BCAMP@ac.cccounty.us, MSTEL @sc.co. contra- 


costa.ca.us, PKUNK@sc.co.contra-costa.ca.us, 
SWILS@sc.co.contra-costa.ca.us 


06/08/2004 10:33 AM 


Subject: Re: Management Longevity Differential 


No problem...\We can let him know it will be on his 7/10 check. 


| do have another request: One of the commissioners retired 
before we processed the pay increase effective last year 
6/1/03 (Comm. SEE)-- We DO want him to receive 
retro pay, and we're thinking his retirement will also be 


affected by the increase and retro pay. 


What do you need us to do (jf anything) to be sure this 


happens? 


Also, we'll want his retro check to come here so we may 
contact him about either picking It up or mailing it. 


Thanks, 


Dana 


One of the misdirected e-mails that 
contained private information about 
Contra Costa County employees 


er municipal corporations,” 
said Krent. 

Moreover, even if the county 
is defined as a person within 


| the meaning of the law, it’s un- 
| been construed broadly to cov- | 


clear if there is a remedy for a 


PeopleSoft EnterpriseOne, 
along with 207 of its 230 trade 
outlets. The rest of the stores 
are due to begin using the 
software this month, he added. 
The ERP system has more 
than 2,100 active users per day 


| and supports functions such 


as planning, forecasting, pro- 
curement and manufacturing, 
according to Sedgwick. He 


said Crane hopes to use the 


system to modernize its busi- 
ness processes and to add ca- 
pabilities such as support for 


| electronic data interchange 


and collaborative forecasting 
with customers and suppliers. 


| Cause and Effect 


Crane has made changes in its 
IT unit and at some business 
operations as a result of the 
rollout problems. The compa- 
ny said it named a new corpo- 
rate CIO who has had exten- 
sive experience on ERP proj- 


| ects, consolidating a previous 


IT management structure in 
which its four divisions had 
their own CIOs. Crane also 

plans to downsize its IT de- 





failure to notify, said 
Krent. “Only ‘cus- 
tomers’ can sue to re- 
cover damages due to a 
failure to notify,” he 
said. “This suggests 
that county residents 
whose information is 
maintained because 
they consume water or 
waste removal services 
could sue.” But resi- 
dents wouldn’t be able 
to sue simply by virtue 
of their status as taxpay- 
ers; there has to be a cus- 
tomer/service provider rela- 


| tionship in place, Krent noted. 


Professor Jeff Matsuura of 
the University of Dayton 
School of Law said the e-mails 
appear to contain personally 


identifiable information that is 
| covered by SB 1386. “It seems 


to me that such an incident 
would gut the statute if this 


| kind of disclosure did not fall 


| within it,” he said. @ 48086 


partment by 30 people after 


the ERP rollout is finished. 


From a business standpoint, 


| the company plans to take a 

| $21 million write-down to cov- 
| er the cost overruns and pro- 

| ductivity losses. Sedgwick 

| said the ERP delays have also 


exacerbated financial prob- 
lems faced by the company’s 


| Tradelink plumbing supplies 


unit, which plans to close 13 
of its stores and lay off 200 


workers. @ 48068 


| PSone 


TEMPORARILY HALTED the 
installation process to review 
its project methodology. 


HIRED an ERP-seasoned CIO 
and gave him responsibility 
for all IT operations in hopes 
of improving coordination and 
accountability. 

ADDED other personnel with 


Groove Aims 


To Boost 


Ease of Use 


BY TODD R. WEISS 


| Groove Networks Inc. today plans to 


release an upgrade of its end-user 
collaboration software that it said of- 


| fers improved security and scalability 
| Capabilities as well as better perfor- 
| mance and ease of use. 


Beverly, Mass.-based Groove, 


| which is headed by Lotus Notes cre- 
| ator Ray Ozzie, began beta-testing 

| the Groove Virtual Office 3.0 up- 

| grade in March. The new release 

| launches and transfers data more 


quickly and lets end users open mul- 


| tiple project workspaces without suf- 


fering noticeable performance hits, 


| said Andrew Mahon, Groove’s direc- 
| tor of strategic marketing. 


The upgrade also includes an 


| on-screen launch bar for managing 
| workspaces and contacts with other 


Groove users, as well as Windows 
folder synchronization capabilities 
that let users share any files stored 
on their PCs. On the server side, 


| Groove said it's adding support for 
| third-party public-key infrastructure 
user authentication tools 


Ethan Schoonover, e-business 
director at London-based ad agency 


| Lowe & Partners Worldwide, said 
| about 300 of the company's workers 


use the existing Groove Workspace 
2.5 to prepare ad pitches, manage 


| accounts and do strategic research 
| Many of the new features in Virtual 
| Office 3.0 are “a great example of a 


company really listening to user 
feedback,” said Schoonover, who 
works in Hong Kong. 

The improved launch speed “ad- 
dresses a key issue with 2.5 - that 


| it was sometimes sluggish,” said 


Schoonover. “Even our technophobe 


| users could get the hang of it.” 


David Marshak, an analyst at 


| The Patricia Seybold Group Inc. in 

| Boston, said Groove's key strength is 
| that it combines real-time online col- 
| laboration with the ability to do work 
| off-line and then synchronize data 


with other employees. Groove's inte- 
gration of those features “is much 
better than anyone else has even 


| attempted,” he said. €9 48087 
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LAYES s FRANKLY SPEAKING 


Mail Mishap 


RA NK 


Not What We Had in Mind 

It's the 1990s, and this training director pilot fish 
orders a PC so his office can be the last one finally 
connected to the LAN. “Because of the way purchas- 


OU’VE GOT TO FEEL FOR TOM WHITTINGTON. 
The CIO of California’s Contra Costa County, across 
the bay from San Francisco, just found out that copies 
of hundreds of internal e-mail messages containing 
financial data and private employee information have 
been inadvertently sent to a Swedish company over the past two 


years (see story, page 1). 


It’s not as if Whittington sat on his hands, ignoring the problem. 
He didn’t know about the address book glitch that caused it. There 
was no indication of anything being wrong. He was blindsided. 

las there anything he could have done? 


Not that I can see. Or at least, not without the 


kind of unlimited budget that doesn’t exist in 
any real-world IT organization, much less in a 
government IT shop at the county level. 
Actually, Whittington was comparatively 
lucky. The e-mails, many of which were stuffed 
with financial and personal data, were intended 
for someone in the county auditor’s office. In- 


stead, they ended up at Ord&Bild, a Swedish In- 


ternet company. And after they started arriving 
there, Ord&Bild repeatedly sent messages to 
tell senders of the wayward e-mails about the 
problem, according to Ord&Bild managing di- 
rector Robert Carlesten. 

But those messages got no response. And no- 
body told Whittington about the messages. He 
didn’t learn about the problem until Carlesten 
contacted Computerworld reporter Dan Verton, 
who called Whittington. 

Whittington was lucky that the data was kept 
confidential and not put to some malicious 
use. But he would have been a lot luckier if 
there hadn’t been any wayward e-mails in the 
first place. 

But what could he have done to prevent it? 
What can he do to keep it from hap- 
pening again? That’s what Whitting- 
ton and his staff are trying to figure 
out now. None of the obvious op- 
tions are very good. 

Cut off the e-mail system from 
the rest of the Internet? That would 
protect the data, but then residents 


| 





Install outgoing-mail whitelists (which specify 
legal destination addresses) or blacklists (which 
list addresses that mail won’t be delivered to)? 
That’s impractical — whitelists are too restric- 
tive, and blacklists can never be comprehensive. 

Eliminate address books from county users’ 
machines so they have to type addresses manu- 
ally? That would have avoided the glitch that 
caused the misdirected e-mails: a garbled ad- 
dress in one user’s address book. But it would 
generate many more mistyped addresses. 

Set IT staffers to work poring over outgoing 
e-mail logs, looking for potentially inappropriate 
destination addresses? That would be spectacu- 
larly labor-intensive and would generate huge 
numbers of false positives to investigate. And 
how would they know what to look for, anyway? 

The perfect solution might be to somehow 
tag sensitive data so it could be automatically 
blocked at the firewall. That would only require 
rebuilding all the county’s systems from the 
ground up, embedding tags in all the data and 
then customizing the e-mail system to make 
sure the tags don’t get removed. Good luck get- 
ting the budget for that past the county board. 

, Whittington’s team is still inves- 
tigating what happened and what 
to do next. Whittington himself 
hopes better training for users and 
clearer policies about attaching 
data to e-mails will help. 

Think there’s a better way? Whit- 
tington would like to hear it. So 


ing worked, | had separate requests for a computer 
system and a printer,” fish says. “It was like Christmas 
morning the day | saw the printer box in the office. The 
feeling didn’t last long, however. My boss, the HR 
manager, approved the purchase of the printer — but 
denied the request for a computer.” 


Ths demands SHARK 
TANK. 


a high-end PC 
to show his tech- 
savviness. But he never 
actually turns it on, so 


it as a supply dump, 
swapping out the VP’s 
working components for 
items that break on oth- 
er users’ PCs. “A year 
later, he was let go,” 
says IT director pilot 
fish. “New VP comes in 
and on the first day at- 
tempts to fire up the 
computer. | had to go 
over to explain what my 
staff had done. It got 
quite a chuckle out of 
everyone - and a new 
desktop was ordered.” 


What a Surprise 
User explains to support : 
pilot fish that her CD- 
ROM drive was sticking 
so she sprayed it with 
WD-40. What? says 
astonished fish. You 
sprayed WD-40 into the 
CD-ROM drive? “Oh 
yes,” user says. “But 
that hasn't fixed it.” 


ae 


tor at the help 
desk told them 
to just shut off 
the computer 

: by holding the power 

: button in for a few 

: seconds,” groans IT 

: pilot fish on the scene. 

: “Around 100 machines 

: were powered off during 
: the installation and 

: wouldn't reboot. Techs 

} had to go to every office 
; to get them running 


- And the Problem 
_ ks What, Exactiy? 
: ahelp desk ticket he’s 
: glad he doesn’t have to 
: unable to read CD-ROM. 
; Please fix ASAP!” 


: Yeah, That'll Help 
_ Network admin pilot fish 
: is setting up a new lap- 
: top when it picks up a 
: wireless connection ~ 
: which turns out to be 
: in the office complex. “I 
; head over to give them a 

: heads-up that they're 
"broadcasting in the 

: Clear, with no authenti- 


site’s sysadmins de- : cation required,” fish 


Geoonaaen 
ing system service pack : 
across the network - but : 
they don't tell users or 

the help desk. As the up- 


_ says. On the C10's desk 
fish spots the wireless 
; router, and he explains 
i : that, by using it, anyone 
can access the Ci0’s 


date slowly installs itself, : network. “OK,” CIO says 


users get impatient and 


couldn’t use e-mail to communicate 
with their government. 

Put in two parallel e-mail systems 
— one for internal messages and an- 
other for e-mail going to the outside 
world? That’s a huge kludge for 
users to navigate. 


FRANK HAYES, Computer- 
world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


would the rest of us. 

Because what happened to Tom 
Whittington and Contra Costa 
County is just waiting to happen to 
every other organization. And the 
next one the problem hits may not 
be so lucky. @ 48030 





call for help. “The opera- : down the power.” 

~ TURN IT UP FOR SHARKY. Send your true tale of T 
life to sharky@computerworld.com. You get a sharp 

Shark shirt if | use it. And check out the daily feed, browse 

the Sharkives and sign up for Shark Tank home delivery at 

computerworld.com/sharky. 





eT 


Py i 
ony 


Timels 
Running Out! 


COMPUTERWORLD Nominate an 


outstanding IT leader 

for Computerworld’s 

Premier 100 IT Leaders 
IT LEADERS 2005 2005 Awards program 


EACH YEAR, Computerworld editors conduct a nationwide search for 

IT managers and executives who show technology leadership in their 

organizations. This prestigious awards program recognizes and honors 

IT professionals from a wide range of industries, drawing attention to the 
innovative, business-critical 


work they do. 
RU aU UR ELIGIBLE NOMINEES include 


CIOs, CTOs, vice presidents, 
; IT directors and managers 
from user companies, nonprof- 


its, the computer industry and 
the private sector. 


HONOREES will be announced 
in Computerworld’s Jan. 3, 
2005, issue and will be our 
guests at the 6th Annual 
Premier 100 IT Leaders 
Conference, March 6-8, 
2005, in Scottsdale, Ariz. 


Deadline has been extended to July 30! 


Go online to nominate an IT leader at computerworld.com/p100nominations or © QuickLink a3420. 
Questions? Contact us by e-mail at premier100@computerworld.com. 





Save over 30% with our blade bundle featuring two HP ProLiant BL20p Blade Servers, powered by Intel® Xeon™ processors, and get the 


power to make network management simple and affordable. 


HP PROLIANT BL20p BLADE 
SERVER BUNDLE 


$8,999 $375 a month’ 
20p bundle * (2) BL20p Blade Servers 
ed to Each Blade Server includes 
(2) Intel® Xeon™ processors 3.06GHz-512k 
(3) 10/100/1000 NiCs + (1) 10/100 iLO NIC 
1GB DDR memory 
* p-Class blade enclosure 
* p-Class single phase power enclosure 
with 2 power supplies 
Mini bus bar kit 
* (8) Rapid Deployment Pack licenses 


Download information about HP Blade servers. 
Read a white paper highlighting total cost of ownership and the Factiva and 
iSource case studies demonstrating RO! 


1-877-726-8116 


hp.com/go/blades4 


your local HP reseller 





